pix/isa setup advise

[cfajardo1_2]

hello,

plss take a look at this setup

network---pix---isa----router---internet

dmz is connected to another branch

is this setup considered as best practice?

thanks a lot.

[jackko]

just wondering if there is any specific reason to deploy both pix and isa.

regardless, the design looks fine. just one comment, the router should have some sort of security feature to protect itself, such as "auto secure".

[cfajardo1_2]

the isa is for the admin to restrict http and pop3 traffic thru user names.