Thank you very much for reply Gerardo, The firewall I'm planning to use is ASA5505-BUN-K9 with OS: asa847-k8.binRouters will be connected behind the FW for Intranet routing, actually there is no hardware on hands, I have to make sure this can be done...