comments for FireWall-1

[Donggyu . Choi @ Korea . Sun . COM (DongGyu Choi - Sun Korea SE)]

Hi experts,

I need your comments for configuring FireWall-1
My customer who is telco company(network service provider)
 like as CompuServ or America online,
want to protect his private network from public internet.
On below fig. Host A and Host B communicate with socket interfaces.
what is the best or recommeded physical configuration with this environment ?


<<Brief network configuration>>

        Host A
     (remote host)      public internet
		|  |    |  |  |  |
		|  |    |  |  |  |
	     -----------------------
	     |  s1 s2  s3 s4 s5 s6 |
	     |			   |
	     |    Cisco 7000       |
	     |			   |
	     |  e1  e2  e3  e4     |
	     -----------------------
	        |   |   |    |
	       /    |   |     \
	     /                  \
     Switching HUB #1       Switching HUB #2
      (Catalyst 5000)          (Catalyst 5000)
	|  |  |  |		 |  |  |  |
                  \             /
		   \           /
		       Host B

        s1, s2 : T1(1.544Mbps) leased line for private network(remote office)
	s3, s4, s5, s6 : 56Kbps leased line for public internet(4 or more connections)
	e1, e4 : local network(10Base-T)


TIA,
DongGyu