Hi All, I have a strange issue I have built a Lan to Lan IPSEC tunnel between an ASA5540 and a PIX515E on the ASA side there is only one subnet I need to protect but on the PIX side there are three. The tunnel is up and passes traffic but it won't pass traffic to all the subnets on the PIX side at the same time, it will ping one subnet but not one of the other ones, unless no traffic passes for a few minutes at which point I can ping one of the other subnets. I have NAT Exclude rule set up using the one subnet on one side and a Network Object Group on the other, I used this same format as the IPSEC rule. Any ideas?