Wondering if anyone can help... Here is the scenario: (untrusted - DMZ) WIN2K -----> PIX ------> (trusted - internal WIN2K) I plan on setting up a Win2K IPSec tunnel between the two servers. Is there anything special that needs to be configured on the Pix if it will only be passing the traffic? Also, both of these servers are on the inside of a 1700 that goes out to the Internet, but that should not make a difference. Thanks. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=16108&t=16108 -------------------------------------------------- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]