We have two 2500s running HSRP from the ISP connected through a hub to a PIX firewall. We are looking at adding a second firewall. Given we will need to use addresses from the public ip range given by the ISP for our web servers, how can we route packets destined to these servers to the second firewall? Is there a way to route to a host device and not a network?