I suspect the problem is that the secure protocol that is being used when she tries to enter the site does not like the fact that the first machine is altering the packet. It has to do this in order to share the connection. This is a big problem with VPNs also. I doubt you will find a workaround, because everything is doing what it is designed to do in these cases. I suggest you replace the ICS with a real router, ICS is garbage anyway. A little Linksys is around $50.00 or less and way better than ICS and it's a real firewall.