I copied the config from a PIX 506 running 6.3.(4) to a PIX 506E running 6.3.(5). All of the clients can connect to the internet when I switch out the PIX 506 for the 506E and everything seems to be fine. My mail server was NAT'd on the 506 with an access rule to allow a certain IP address range (our spam and email antivirus vendor). This works fine on the 506. I copied over the config file to the 506E making sure that I overwote the config and not appended. Everything seemed to copy over fine. When I bring the 506E up, no connections can be made to the PIX 506E to the mail server. Also as a note the mailserver cant even get on the internet. If I remove the NAT from the mail server the server can get on the internet fine using the PAT address (the IP address of the outside interface). I can make it work by NATing another IP to the internal address of the mail server and it works fine. I dont want to do this because I would have to go an manually change all of the cell phones that connect to our mail server via activesync, and I would have put out a message to all users using the webaccess, or make DNS changes to reflect the change. I dont understand why one IP wont work and another one will for the same server. I even deleted all the NATs and access rules and put them back in and NADA, but If I say that 192.168.0.55 is 66.66.66.66 (example) it wont work, if I say 192.168.0.55 is 66.66.66.67 then it works fine. I have examined the config from both pix firewalls line by line, The only difference is the software version 6.3(4) and 6.3(5). Any Takers