I was under the impression that by default, conversations started on the inside of a PIX would go out and responses would be allowed in. And it does seem to work like this for various apps like Web, telnet, ftp and so forth. However, I am trying to get pcanywhere clients inside the PIX to connect to pcanywhere hosts outside the firewall and this does not work. Is there anything special I need to know about this particular operation? I know that my clients are sending out on TCP 5631 and UPD 5632 but I do not know what ports the host is trying to use to return data. In any case I would think that since the conversation is started on the inside that this would not be a problem and that the PIX would allow the return traffic. Any suggestions?