We're considering replacing a pair of PIX 525s and a pair of VPN 3005s with a single pair of ASA 5520s. I'm looking at the configuration changes that will be needed. The PIX side seems pretty easy... I've run the PIX-to-ASA conversion utility on the config, and it looks like only a few changes are needed. Is there any kind of utility or process like that on the VPN side? I didn't set the VPN 3005s up originally, and it will be a bit of work to set the vpn stuff on the ASA and make sure all features are copied over.