> One thing to note - SPF and crypto do not mix.
What! Certainly SPF and crypto do mix. Take a look at Sunscreen. It is a
stateful packet screen AND supports strong crypto through the use of SKIP.
Maybe you meant to say that NAT and crypto do not mix, but again depending on
the configuration NAT and crypto can be used together. Again check out
sunscreen from Sun. www.sun.com/security or www.sunscreen.com
And Ryan, Sunscreen SPF does support NAT in a bridging environment.