OK...let me throw my 2 cents in here. If you hang one interface of the concentrator in your DMZ (public) and the other on a new VLAN that both your internal conecntrator interface and an external PIX interface sits you will accomplish a few things.1)...