Is there any reason the following configuration would not work. I would like to create 2 vlans on a css and connect each to 2 interfaces on an ASA. Then connect 2 servers into the 2 vlans on the css. The 2 servers should not be able to talk to eachother except through the firewall. It seems like a simple set up but no one ever suggests it, they always suggest a one armed topology?

-ASA-

int e1

ip addr 192.168.100.1

nameif inside

int e2

ip addr 192.168.200.1

nameif dmz

-CSS-

int e1

bridge vlan 100

int e2

bridge vlan 200

-Servers-

Server 1 = 192.168.100.x

Server 2 = 192.168.200.x