I'm trying to create an IPSec VPN between a central site with a PIX 501 and two remote sites also with PIX 501s. The Central location currently has 1 public IP with a router performing NAT. The PIX sits directly behind this router. The situation is identical at the remote sites. My initial question is if this is possible?