I think the firewall should be integrated with the security tunnel to the internet, because each tunnel will need its own rules. So, I'll take that on, too. Madhur just got an new requirement! -Ralph