I had to disable PFS in the IPsec rules on one of our ASAs to allow Android Gingerbread clients to connect. Does doing so compromise the security of the VPN? Communications are AES-256 or AES-128 with group password. From my research, it seems like PFS is considered by some to be questionable, and to tell you the truth I never really noticed it before now, so I just don't know what to do here.
ETA: since this is apparently relevant, the ASA in question is used only for Remote Access, no lan-to-lan.