InternetAdmin NetGW eth0Web ServersDatabase ServersDedicated Management (MX)MX eth0GW onlyeth4eth2Web Userseth5 eth3Internal UsersDistributed Management and 2-Bridge GatewayGood example: SecureSphere deployment Segmented management network Web and database NOT on same segment Internal users follow same path as external users What if?User segment added on FW#2