[jvalenzuela]

Well, we solved the problem by restarting the vpn on the pix side. A problem I usually have with pix's is that they don't renegociate the key if they think the tunnel is still up. Also, the tunnel may be down for an hour and they still think it's up. So when the fw1 sends a new key, the pix reject it.

However, it's working now. I'll use the command you post to check the domains. I'll need to add more host to this vpn and would have the same problem again.

Thanks

Jorge