hi
1.To have DMZ support as per the data sheet available its 515E which supports the same.
On the same H/W you can scale upto 6 Fastethernet ports at the max.
2.You will have to use SSH for accessing a PIX firewall from outside interface and you need to allow the necessary access in the configurations.
From the inside local lan behind the inside interface you can have simple telnet access enabled with the reqd configs in the box.
3.if you want to ensure some kinda security for your telnet access do check out for SSH and diasble telnet access to your box or else block them using necessary ACL on the linevty configs.
4.Console port basically reqd to monitor the boot process or to recover your box if it gets hanged up while booting.
it normally goes into ROMMON to recover the box out of that you need to console onto the box coz the interfaces wont be active/valid during that period.
The interfaces comes active only when the active config is loaded on the box during the startup process.
Out of band management is basically accessing your equipment via normal PSTN line instead of normal telnet or ssh.
if theres some probs with the connectivity or some other probs you can very well login via the OOB setup which you do with normal dialup modem and the reqd config usually under aux interfaces to accept the same.
5.The local lan can acess the internet provided you have proper natting enabled on the firewall but if you want to have some kinda access from publi network to these servers it wont be possible since the ip assigned by your SP is dynamic in nature which will keep on changing based on the availability.
regds
