i am upgrading a PIX 501 to a PIx 515. there are 2 site to site vpn connections defined on the 501 that i need to move to the 515 config. i took these over from our admin that quit and he doesnt have the keys. is there any way to find out the encrypted key s or do i have to change them to something else at all 3 locations. also what is the easiest way to change this box over? do a sh run on the 501 and copy and paste it into the 515? thanks for any help..