a00fff17_Point_to_Point_on_PIX__Description
[Command] sysopt connection enforcesubnet [Description] 
Prevents packets with a source address belonging to the destination subnet from traversing an interface. A packet arriving from the outside interface having an IP source address of an inside network is not allowed through the interface.
Point-to-Point on PIX
Description