Pix 50X , tunnel limits

[wifiguy]

From the doc I have read it appears the 501 can support 5 concurrent SAs. Does this mean end user tunnels as well? And do I "burn" only one SA per end user? The same goes for a tunnel to another router/pix. Do I only use one SA?

Thanks in advance

Mike LeBlanc

Infosec Consultant, CISSP

[gfullage]

The 5 limit really means 5 peers, not SA's. So, you can have 5 users VPN'ing in, or 5 remote router/PIX tunnels connected.