Most of the remote CCIE labs have a pix available on the rack. I help run a virtual lab that includes a PIX 506 and we hope to pick up another one for the site to site VPN stuff. If you'd like to give it a go drop me an email. The training center I work with has low cost and some no cost access. We should be starting a CCS1 study group pretty soon for anyone in the DFW, Texas area.