What would be the preferred method to configure an ASA AIP 5520 so that an additional ASA5520 with CSC behind it will work?
I am thinking the inside interface on the AIP ASA to be say 192.168.120.0/30, set up a static 1:1 to map 192.168.120.2, the second ASA to a public IP, and natting on the second ASA. The first ASA is IPS and DMZ, the second is pure internet access only.
Thoughts? Will IPS function as it should in this setup?