Even a PIX 501 can be used (ok with very few VPN tunnels -5 max). However i realized that i needed ACS to use extended authentication (userid/password) for the VPN clients. Otherwise VPN client logs on just by configuring the vpngroup name and vpngr...

Hello, i happened to see your question. So here is what i have found:logon to ftp://ftp.cisco.com/using your cco account and go to ftp://ftp.cisco.com/cisco/ciscosecure/pix/archive/it starts from 4.41 and going up...Have fun,Vassilis