Just to update on this, I am now pretty sure you can have a different IP Pool for the Global Space, as long as the ISP Routers are able to route to the Pix Interface. It's similar to how a router works with NAT. The packet will hit the Pix Interface and the Pix will know that the IP is actually addressed in its NAT statement and would therefore just NAT it accordingly. If you then use a NAT 0 statement, it will just route the traffic instead of actually natting it in this case.
Cheers
Wayne Murphy
Firewall.cx Team Member
www.firewall.cx
Now working for a Security Company called Sec-1 Ltd in the UK, for any
Penetration Testing work visit
www.sec-1.com
or PM me for details.
