I'm migrating from a PIX 525 to ASA 5520 failover pair. Both firewalls are at 7.0.7 code. At cutover time, configuration commands were copied from PIX to ASA with adjustments made to interface names, as well as speed / duplex of interfaces to keep all aspects the same. All switch port interfaces remained the same. Internet access with PIX inline works fine; DNS resolves names properly. When ASA's are brought inline, Internet access fails. ARP cache were cleared on ASA's and ethernet switches. Are there any known conversion commands and or debug commands that can be used to isolate the problem with the ASA's being inline versus the PIX's being inline?