Hi,I totally agree with ur opinion.I would also like to add that having 2 diferent f/w technology such as application proxy with strict authentication at the second tier will give u max security.If u have more bastion hosts such as WEB,FTP services w...