Hello   We currently have an MX100 as our edge firewall and will be putting in a Cisco ASA to be used purely for remote access VPN connectivity. We don't have any spare public IPs to assign to the the ASA so we'd like users to be able to connect to it via the MX100. Just thinking out loud, perhaps port forward the VPN ports through the MX and route them to private IPs on the ASA's outside interface. Any ideas on how we can achieve this functionality without opening up security holes?   Thanks AK ... View more