I have created a site-to-site vpn tunnel between a PIX 525 and a Cisco VPN 3030 concentrator. Since the PIX doesnt participate in the tunnel, I am sending syslog messages, in clear text, over the Net to a syslog server that is NAT'd for the outside and permits UDP 514. The problem is CLEAR TEXT. Is there a better way to accomplish this, other than putting a syslog server on the inside of the remote LAN.