Later when people complained about not being on the Internet, I realized that the PepLink box was only letting public LAN addresses (e.g. the 'public LAN' subnet between my router and firewall) get out if the public LAN address was statically NAT'd to an internet 192net address. All of the DHCP'd workstations couldn't for whatever reason http out.
It turns out to have been this line in the PIX global (outside) 1 1.2.3.19 that 1.2.3.19 PAT address was the one I was using for my PepLink :b
