I seem to remember asking this question before, but.... Although not covered in the IPSEC architecture, is there any restriction on a Security Gateway applying both ESP and AH in tunnel mode? Thanks, Steve.