Hi Folks!!

I want set up a Screened subnet. For this purpose, I have two device. One of them will be the external firewall and the other will be the internal firewall.
Both of them have installed a stateful inspection firewall (Vyatta Vyatta - Welcome to the Dawn of Open-Source Networking). I'm thinking set the external firewall with NAT and the internal doing routing, and put a Proxy server in the middle. What do you think about this configuration?.

Thanks in advance.