Hi

In addition to all Steven's suggestions you could run "debug crypto isa" and then initiate a connection. If you see nothing on your pix then yes it could be getting blocked.

Jon

You can use Ethereal and USE TCPDUMP utility.

It will show you easyly... How traffic floow in between two device.

Sniffer: You can SPAN switch port use ETHERPEAK ANALYZER NX. You will get idea.

3) Implement below

access-list capin permit ip host {Firewall outside IP} host (Router Outside)

access-list capin permit ip host (Router outside) host {Firewall Outside}

access-list capin permit ip host (Firewall Outside IP) host {Router IP}

access-list capin permit ip host {Router IP} host {Fiewall Outside IP} capture capin access-list capin interface Outside

See show capin callin command Output

Regards,

Dharmesh Purohit

Thanks for all your help guys. I had already called the ISP and was told that there was no blocking. I called again, got a different tech, and my problem was solved when the 2nd tech reconfigured the router fronting my PIX.

Thanks,

Diego