I goes from a client at my home, which is behind a 501 PIX, across the Internet, through a PIX 520 at work, and then terminates at a Cisco 3000 VPN concentrator. Our VPN connections have been working through the PIX 520 on the work end for quite some time. I'm just not sure what I need to open...