That depends on what the protocols require and how your hotspot is set up. For example, we tend to hand out a pool of public IP addresses to our hotspot users and don't NAT the hotspot users at all (unless they don't use DHCP on the client machine, then the universal client will have no choice but to NAT them). In such a public IP hotspot every protocol works, including IPSEC without NAT-T etc.
So there is no general answer to your question. It depends too much on your setup.