Thanks for the article. Is there any other information from Cisco on this "special" MTA address functionality re your statement "The secured streams which terminate on the firewall will be permitted automatically by the firewall".
In the config guide...