The 515 is configured to hand out IP addresses from a pool. When a remote user authenticates to the PIX (through NT domain authentication via the ACS), they get an address. Machines on the local network can ping this address, but the remote machine...