I have a PIX515 (6.2) with three interfaces (inside, outside and dmz), I need to encrypt traffic that's originated from the inside to the DMZ subnet. My question is, can i terminate an IPSEC tunnel that's originated from the inside (the other end will be 3640 w/3DES feature set and VPN module) to the PIX's DMZ interface? If so, what IP address would then tunnel terminate? Thanks in advance.