I can't access Microsoft shares via an IPSEC tunnel to the computers behind the firewall. Do I need to do something with packet filtering?

When you access shares you must specify the IP address and not the name.