We currently have a link to one site via a router which is behind a PIX firewall. We use static routes from our network, soon we will be having a 2nd link to a backup site (the two remote sites are connected) which we need to configure as a failover, again behind a different PIX. I tried configuring a floating static which works ok if the primary outbound interface fails but this is unlikely to be the case in practice. What is the best way to accomplish this switchover? We currently run RIP internally on Catalyst 4500's; I believe the External Company is using BGP.