Hi. I am still learning about PIX, and I have a question: I have a PIX520 running 6.2(2) with 128MB RAM and 16MB Flash and I currently have 15 Tunnels configured and running. All have "Permit IP" in the access-list statements and I would like to change these to limit to specific ports needed for each tunnel. Most only need Port 23 (Telnet) but a few need 20 and 21 for FTP. I am under the assuption that I should only have to make the change on my end. Is this correct, or will similar changes need to be made on the firewall at the other end as well? Sorry if this is a stupid question, but I am learning as I go. Thanks