Hi guys, I am task to set up 2 physical firewall of different brands. I need to ask some technical question. Currently I am using a single firewall design and NAT is configured for mail and web servers. If I'm using a dual firewall design with the 1st firewall facing the internet and the 2nd one connected to the LAN with a DMZ in between, may I know how NAT is configured? Is NAT configured on the 1st firewall or 2nd firewall? Only ACL is configured on the 2nd firewall? What kind of changes am I looking at configuring? I also have site to site VPN configured. Thanks for your help.