I just replaced a Netscreen firewall with an ASA 5515-X. Everything works, almost! The Netscreen allowed clients on the guest network to access NATed hosts on the DMZ and inside interfaces, with their Internet addresses. There was nothing special a...