Fair enough, workaround or not, I am just glad to see this is working. It seems odd that there is a routing issue with such a simple setup? Is this related to the version of ScreenOS running on the Firewall/VPN device? What is even more unsettling is that I reset the original settings back into the policy, reset the device to flush any caching and I can still see the devices on the Trust side....confusing...U bet!!!
Well, I am just going to chock this up to good old FM technology,or just needed a kickstart, and leave it for now.
thanks again for your input
Hulk