Hello. I'm trying to figure out what sort of NAT config I need to use in order to have my Pix 515 function as a normal office router (dynamic NAT for outbound traffic from the inside interface), a VPN appliance (IPSEC listening on the outside interface) and be able to route both internal traffic and vpn client traffic out to a third interface connected to a seperate network (using a dynamic NAT similar to the one on the inside->outside interfaces). I have tried a number of NAT configs and none of them have worked, so I have a feeling I am either going about it the wrong way or I am hoping to do something which cannot be done with a Pix 515. Any one have any ideas? Thanks!