My company recently purchased a 3030 Concentrator. We currently have 2 Pix 525's configured as stateful failover. Would it be best to place the concentrator behind the Pix firewall? or have the concentrator's public interface plugged directly into the perimeter?
