Wondering if anyone has tried that, VMware says UAG is a hardened appliance so can it's external facing NIC have a public IP and it's management/internal NIC sit in the DMZ with static routes to connection servers and agents?
Currently I utilize a single NIC in the DMZ and I NAT a public IP for each UAG appliance and 1 IP for a VIP, with the built in load balancer I'm wondering if I can use that and just stick the external interfaces right on the WAN and remove the additional complexity of rules on an external facing firewall, then I'm just dealing with rules from DMZ to LAN, also wonder if performance would be better without that extra layer of NAT/front end firewall and separate load balancer.
Thanks
