I'm moving from a Pix515e Failover set to an ASA5520 Failover set, and ending up with 2 less interfaces on the ASA. Is it a given that I should allocate 1 interface each for outside, inside, and failover - and then put all my DMZs on sub-interfaces of the single remaining interface? Or is it safe to distribute all DMZs along with the outside and inside among the 3 non-failover interfaces by bandwidth utilization?