Thats how we did it at one point invictus. Had a NAT box sitting between the Proxy Server an the outside world. Not anymore, because I got rid of the Microsoft Proxy Server, but that is beside the point. Many people don't consider NAT a firewall, but the outside world couldn't see the Proxy Server, and that was the important part.
