Before you even start in on me, I know the PIX can be used as the VPN device but I prefer the management options for the Concentrator. My question is, how hard would it be to have a 3005 with a public IP address sit BEHIND a PIX 506 as opposed to parrallel to my 515 as it is now? I upgraded to a 515 from the 506 and since I have this 506 lying around I wouldn't mind using it to shore up the security for my 3005 VPN Concentrator. Anybody?