It seems that in order to enable dhcprelay on the ASA you have to point the relay out the outside interface. Can anyone say for sure if this traffic is still getting encrypted when using the ASA as an EZVPN NEM client?I haven't had a chance to test ...