I have a customer who would like to hook up some remote sites via an ISP into their existing VPN3005. Since these remote sites are less than 4 users, the PIX 501 looks like a good fit. I'm planning on using 3DES on the tunneIs, I'm assuming I will need at least 1 routable IP for the PIX 501 to be able to establish a LAN-to-LAN connection to the 3005. Is anyone out there doing this right now and are there any issues I need to be aware of with the proposed configuration? Thanks in advance.