I currently have a dmz with FW1 (inherited) which is going away. I also have a new application that needs a dmz and I need to look at alternatives. Traffic from the internet into the dmz needs to be limited by uname/passwd and will be about 100 hit...