Several Windows machines reside on the same network segment as the "inside" interface of the PIX. Occasionally, the PIX responded to ARP request using its "inside" interface MAC. This somehow fooled the connecting server, making it fail to connect to another server which is on the same segment as itself. It seems that disabling proxy arp on the PIX can solve the problem. Does anyone have experience using the "sysopt noproxyarp inside" command? Will this have side effect on the PIX as far as other NAT, Global, static, alias addresses are concerned?