I haven't been able to find one word from them about how they broke everyone's VPNs with Mavericks. It's fine though, I just consider it our just punishment for ever allowing Macs into a business environment.
The issue was vpn behind nat wasn't working as expected, copying raccoon over from 10.8 server fixed the issue (not ideal but it took all of 5 mins).