I'm moving from a Pix515e Failover set to an ASA5520 Failover set, and ending up with 2 less interfaces on the ASA. Is it a given that I should allocate 1 interface each for outside, inside, and failover - and then put all my DMZs on sub-interfaces o...