RE: Recommendations

>>I've looked at the PIX-501, but I've always been a little scared of
per-user
>>licensing. If I purchased a 10-user PIX-501, and set it behind the SDSL at
>>the main office, it would only allow 10 users to get Internet access?

Yes...10 user license means just that. You'll need to order the PIX 501 with
a 50 user license if you want
more connections. For the main site, I would go with a 506E.

>>No matter what product I choose, would a site-to-site VPN work with a
static
>>address on one side and a dynamic on the other?

Yes, the PIX can do IPSEC LAN to LAN tunnels with dynamic IP at one site.

http://www.cisco.com/en/US/products/sw/secursw/ps2308/products_configuration
_example09186a0080094680.shtml

>>Would any PIX handle PPPoE with a dynamically assigned IP?

Yes...Pix with PPPOE:

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration
_example09186a00801055dd.shtml

Watch for wraps on the URLs

Kevin