PIX 501 number of SA question?

[mkrylov]

I am looking to purchase a couple of PIX 501 to support partnernet VPN connections. I understand that 501 supports 5 SA's simultaneously... My question is if I have 5 networks on one end and 5 networks on the other end, does that mean I am usuing up 25 SA's, or it is just 2, 1 for each terminating end (e.g. PIX firewall). Thanks!

[gfullage]

The 501 supports 5 PEERS, not SA's. There's no limit to the SA's (although these are restricted by memory if you have enough of them, but in general you won't hit the limit), just the number of peers that you can build SA's to.

The limit of 5 peers includes LAN-to-LAN session and VPN clients connecting in.