The Cisco blurb will tell you to use the Concentrator for roaming vpn clients etc but I use mine for both vpn clients and 30 site to site VPN tunnels. it's a lot easier to manage and the gui is useful for monitoring sessions, limiting bandwidth etc.I...

A few questions for you:Have you enabled logging? If so is it via TCP by any chance?One you have enabled it, please do a sh logging and see what it throws up, you may see the source of the high cpu usage there.I'll keep an eye out for your repsonse s...

If you click on System Status under Monitoring what does it tell you as far as sessions, cpu use and throughput etc.Also if you click the tab underneath: Memory status what is the output? What model of 3000 concentrator is it? 3005?

Also the PIX's OS is primarily designed for Firewall work, not routing, therefore the OS (finesse) is hardened and less likely to be flawed.

I used the above book and it's very good if a bit voluminous! Also try the Bson tests, good way to raise general knowledge levels