On a hub-spoke structure we have a VPN 3005 concentrator as a hub and VPN 3002 clients for each spoke. Considering we want to implement fault tolerance on each site, what would be your recommendation, use PIX firewalls in addition to the VPN 3002 cl...