I have set up a site to site VPN using two ASA 5505's. Site A is directly connected to the web with no other devices in front of it. Site B is behind a PIX 515. The tunnel is up as indicated by the VPN light on the ASA. Do I need to open any ports on the PIX to have traffic flow across the ASA VPN? Am I correct in thing that since the tunnel is up between the two ASA devices, no ther device will or can see that traffic?