Newbie PIX FW Design Question

[nleachman]

Hi,

I am getting ready to replace a managed FW solution that includes a screen router, a Checkpoint FW, and a choke router with a PIX solution. Since I will have a router to intercept the provider's circuit I am planning to

use that router as a simple screen and then place the PIX 515 behind it. I will then build my DMZ off of the 515.

My question is, is there any reason under normal business requirements to add a choke router behind a PIX? After reading through the doc I can't come up with any; but I am pretty new to the firewall world and want to be sure I have my bases covered.

Thanks for any thoughts,

Nick

[hadbou]

This is the only point I could think of, a router has to be used behind the PIX to achieve routing between the existing network and the newly added network.Otherwise I don't see a requirement for a router behind the PIX.