Hey I have a question regarding setting up a certificate based VPN with a pix running the 7.04 software. Currently I have a VPN functioning but it is using group based auth and I'd like to switch it to use a certificate, but I do not have a CA server. I've heard that you can have the pix operate as a CA server and just sign the certificates generated for each client on the cli...Any thoughts?