I have recently migrated a site from PIX 6.3 using a 3005 for remote access connected to a DMZ interface. The 3005 would assign a IP pool per group and on the PIX this IP range was NATed to the inside interface. The inside interface could reach all t...