In my previous firewall I was able to DNS records which was helpful as we only have a few names to provide publicly. But now that I am setting a pix525 I realize this service is not available. I do not want to want to have my service providor advertising these names as the addresses may change often and I would rather avoid contacting them. I do not want to use the W2K active directory DNS for public addresses. So I am whittling myself down to building a box just to handle five name translations. Am I overlooking an obvious remedy here?