I tested IOS with IP-IPSEC 3DES and it works with Astaro. (NET-to-NET) I don't know about Cisco PIX, i only know you need 3DES Feature or Unrestricted Software for your PIX. I have some PIX-to-PIX VPN's running which work very stable. If you got it running against an Astaro , post how you did it here. [:)] I am interested in that.