The best thing to do would be to buy a router at each remote site that can
create an IPSec VPN to the main site (which I'm sure the PIX can do). You
shouldn't need a pix at the remotes, maybe a Linksys (baby Cisco) or a
CyberGuard. Then the remote workstations would appear to be on your network
from all perspectives.
....kurt