NAT with VPN

Hi,

We're looking to implement Always On VPN but I've been told by SonicWall support that NATing IPSec/IKEv2 ports (500 & 4500) isn't possible while using the site to site IPSec VPN. We have to disable it in order for the NAT rules to function, and it does work correctly when disabled. 

I just wondered if anyone else has managed to get around this another way? 

Thanks,

DJ