We have employed dual firewall architecture at the network edge consisting of a pair of Cisco ASA 5540 with the AIP-SSM20 IPS module, and Microsoft's ISA server with Surf Control. The Cisco ASA's connect to the Internet and the ISA's connect to the I...