I'm currently working on configuring a PIX for VPN services. We are connecting to a CheckPoint firewall over the Internet. We are using a manual IPSec setup. Does anyone know if the CheckPoint can be configured with different SPI values for both the AH and the ESP? Andrew VPN is sponsored by SecurityFocus.COM