2 issues with ASA 8.4

Question

I think the problems are related to NAT and how it is implemented in 8.4. Any help THANKS!!
1) vpn client connects, but can't access the network
2) I need to allow pcanywhere traffic to go through the ASA to host 192.168.200.99. The remote host is a DHCP client.
Here is my config:
=~=~=~=~=~=~=~=~=~=~=~= PuTTY log 2011.04.16 09:33:06 =~=~=~=~=~=~=~=~=~=~=~=
: Saved
ASA Version 8.4(1)
hostname kasa
domain-name k.intra
enable password 123 encrypted
passwd 123 encrypted
names
interface Vlan1
nameif inside
security-level 100
ip address 192.168.200.1 255.255.255.0
interface Vlan2
nameif outside
security-level 0
ip address dhcp setroute
interface Ethernet0/0
switchport access vlan 2
interface Ethernet0/1
interface Ethernet0/2
interface Ethernet0/3
interface Ethernet0/4
interface Ethernet0/5
interface Ethernet0/6
interface Ethernet0/7
boot system disk0:/asa841-k8.bin
ftp mode passive
dns server-group DefaultDNS
domain-name k.intra
object network obj_any
subnet 0.0.0.0 0.0.0.0
object network MNKA
host 192.168.200.99
object network RDP_static
host 192.168.200.99
object network OBJ-INSIDE_HOSTS
subnet 192.168.200.0 255.255.255.0
object network OBJ-RAVPN
subnet 10.10.10.0 255.255.255.0
object-group protocol TCPUDP
protocol-object udp
protocol-object tcp
access-list OUTSIDE-IN extended permit tcp any host 192.168.200.99 eq pcanywhere-data
access-list OUTSIDE-IN remark ACL outside interface for PCanywhere
access-list OUTSIDE-IN extended permit udp any host 192.168.200.99 eq pcanywhere-status
access-list OUTSIDE-RDPIN extended permit tcp any host 192.168.200.99 eq 3389
access-list OUTSIDE-RDPIN extended permit object-group TCPUDP any host 192.168.200.99 eq 3389
pager lines 24
logging enable
logging asdm informational
mtu inside 1500
mtu outside 1500
ip local pool eng_pool 10.10.10.10-10.10.10.20 mask 255.255.255.0
icmp unreachable rate-limit 1 burst-size 1
asdm image disk0:/asdm-641.bin
no asdm history enable
arp timeout 14400
nat (inside,outside) source dynamic any interface
nat (inside,outside) source static OBJ-INSIDE_HOSTS OBJ-RAVPN destination static OBJ-RAVPN OBJ-RAVPN
object network obj_any
nat (inside,outside) dynamic interface
object network MNKA
nat (inside,outside) static interface service tcp pcanywhere-data pcanywhere-data
object network RDP_static
nat (inside,outside) static interface service tcp 3389 3389
access-group OUTSIDE-RDPIN in interface outside
timeout xlate 3:00:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00
timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute
timeout tcp-proxy-reassembly 0:01:00
dynamic-access-policy-record DfltAccessPolicy
aaa authentication ssh console LOCAL
http server enable
http 192.168.200.0 255.255.255.0 inside
coldstart
crypto ipsec ikev1 transform-set set esp-3des esp-md5-hmac
crypto ipsec ikev1 transform-set eng_trans esp-3des esp-md5-hmac
crypto dynamic-map dyn1 1 set reverse-route
crypto dynamic-map dyn_map 1 set ikev1 transform-set eng_trans
crypto dynamic-map dyn_map 1 set reverse-route
crypto map mymap 1 ipsec-isakmp dynamic dyn1
crypto map stat_map 10000 ipsec-isakmp dynamic dyn_map
crypto map stat_map interface outside
crypto isakmp nat-traversal 30
crypto ikev2 policy 1
encryption 3des
integrity sha
group 2
prf sha
lifetime seconds 86400
crypto ikev1 enable outside
crypto ikev1 policy 1
authentication pre-share
encryption 3des
hash sha
group 2
lifetime 86400
crypto ikev1 policy 10
authentication pre-share
encryption 3des
hash sha
group 2
lifetime 3600
crypto ikev1 policy 65535
authentication pre-share
encryption 3des
hash md5
group 2
lifetime 86499
telnet timeout 5
ssh 192.168.200.0 255.255.255.0 inside
ssh timeout 20
console timeout 0
dhcpd dns 208.67.222.222 208.67.220.220
dhcpd domain k.intra
dhcpd auto_config outside
dhcpd address 192.168.200.100-192.168.200.110 inside
dhcpd enable inside
threat-detection basic-threat
threat-detection statistics port
threat-detection statistics protocol
threat-detection statistics access-list
no threat-detection statistics tcp-intercept
webvpn
group-policy eng_policy internal
group-policy eng_policy attributes
vpn-idle-timeout 30
default-domain value k.intra
username xtu password 123lol encrypted privilege 15
username vpnuser password uGotit encrypted
tunnel-group eng type remote-access
tunnel-group eng general-attributes
address-pool eng_pool
default-group-policy eng_policy
tunnel-group eng ipsec-attributes
ikev1 pre-shared-key *****
isakmp keepalive threshold 30 retry 5
: end

Answer 1

Running config is right above.
here is the output
asa# packet-tracer input outside tcp 4.2.2.2 1025 1234 pcanywhere-d$
Phase: 1
Type: ROUTE-LOOKUP
Subtype: input
Result: ALLOW
Config:
Additional Information:
in   1.2.3.4    255.255.255.255 identity
Phase: 2
Type: ACCESS-LIST
Subtype:
Result: DROP
Config:
Implicit Rule
Additional Information:
Result:
input-interface: outside
input-status: up
input-line-status: up
output-interface: NP Identity Ifc
output-status: up
output-line-status: up
Action: drop
Drop-reason: (acl-drop) Flow is denied by configured rule
Same goes for RDP
asa# packet-tracer input outside tcp 4.2.2.2 1025 1.2.3.4 3389
Phase: 1
Type: ROUTE-LOOKUP
Subtype: input
Result: ALLOW
Config:
Additional Information:
in   1.2.3.4    255.255.255.255 identity
Phase: 2
Type: ACCESS-LIST
Subtype:
Result: DROP
Config:
Implicit Rule
Additional Information:
Result:
input-interface: outside
input-status: up
input-line-status: up
output-interface: NP Identity Ifc
output-status: up
output-line-status: up
Action: drop
Drop-reason: (acl-drop) Flow is denied by configured rule