Currently, we are trying to decide on the best architecture for our DMZ.We have an ASA 5520. Our DMZ zone is interface 1/3 on this ASA, and we are using subinterfaces to trunk for VLANs. The two VLANs within the DMZ never need to communicate with eac...