The PIX 501 documentation states that it supports a maximum of 5 simultaneous IKE SA's. Does this number refer to the IPSEC sessions that are terminated by the PIX? If I am not terminating these sessions at the PIX and instead use VPN client software on my clients, am I bound by a specific number of SA's if the PIX is just passing these sessions through? Thanks.
