Actually I would be of no help to anyone regarding that system, my design is well understood by many security experts and locked down like a mother fuckers, basically you have one Datapower device acting as a security gateway in the DMZ, with another DataPower device acting as a mediation service inside a trusted zone. there is mutual authentication setup between the two devices. All requests must be strongly typed and registered in a product called IBM Webspehre Service Registry and Repository ... it's a bad ass architecture that's all I can tell you and to this day it has not been hacked. Southern California Edison go ahead make my day and try to hack them. They can use some free pen testing.