Thanks that sounds right and shows a good answer (no ports).  While I was writing this, I noticed what I think is an update because I didn't see this before in the bug confirming your understanding too. https://bst.cloudapps.cisco.com/bugsearch/bug/C...

Marvin, Thanks for your reply, that is helpful and reasonable.  I've tried feeding this answer to Cisco TAC for confirmation but they haven't been willing to state that the box cannot be compromised using the public facing interface.   Do you mind me...

So are we saying that we believe FDM managed firewalls can be compromised over their Internet facing port using this vulnerability and there is no work around?