I've been asked to configure an ASA 9.x routed mode with two DMZs. An APP server currently sitting on the internet with two outside interfaces, and one inside interface should span (bridge) these two DMZs Inside on on DMZ, outside on another. The current outside addresses will be configured NAT to new internal addresses in the second DMZ. The inside interfaces will stay the same, but the live on the first DMZ. I've posted a simple diagram. I'm wondering if anyone has any specific Ideas or concerns with this setup? Thank you.
