Usually we configure on the PIX the remote VPN clients without NAT (no nat) when they talk to machines on the inside interface or dmz. So when the host on the dmz answers to the VPN client, it's to his real address.Now I like to have the VPN client s...