Hello, A week ago I came accross a network designed in the following fashion: LAN---CheckPoint(routed)---ASAwithSSP(transparent)---UNTRUSTED SubnetXt - External range on the CheckPoint's outside inf ASA (transparent and might have inspection turned ...