In 7.x you can apply ACL on a Out bound interface rather then just he Inbound on Pix FOS 6.x. What are others doing with the outbound ACL? Just setting the outbound for permit ip any any? Thanks Scott