We are feeding the Firewall Analyzer with PIX syslog and it is working fine. We started now to send the VPN syslog messages and we have set it up as suggested by the instuctions except for the facility that we have setup as LOCAL0 instead of LOCAL7. I wonder if this minor difference could cause Firewall Analyzer to ignore these messages.