still new to pix. i have set up vpn through the pix with group access. i would like to give a vendor an account, but i only want him to access a specific server inside, not the entire network. is this possible with an access list? (if so, could i get the syntax) or are there other issues i need to consider?