My case is like this: an (web)applcation server hosts multiple web apps for the public to access. Moderate traffic. The server is located in a Commercial Hosting Company's server room. So the server can directly plug into the LAN (which is connected to the internet).
1) Among the PIX 50x series, which firewall fits this situation better? (I'll need the firewall to support the NAT, DMZ and VPN). Or I may even need other firewalls (budget sensitive).
2) Is the double firewall necessary to build the DMZ? (i.e. PIX --DMZ-- PIX)
3) Any opinion or comment on the Microsoft ISA Server 2004 (which claims to be a better firewall).