We have a managed WAN between the UK and Belgium, on the UK side there is a managed router, I have been asked to place a PIX 501 behind the router to restrict traffic from belgium, i.e the outside interface to plugged into the router and the inside interface into the internal network... but becuase the inside address of the router is within the internal network range I am thinking that this is not possible. Can anybody confirm ?