BO 3.1 SP3 and DMZ Deployment

We are using BusinessObjects 3.1 SP3 for Internal use. We are scaling our system and now we have a requirement where BO reports should be accessible to External users. New Infrastructure will look like: External User --> Firewall --> DMZ --> Firewall --> Internal Network --> BO web server --> BO App server 1. What is the best practice in deploying BO in DMZ? 2. What are the licensing agreement if we build new BO web server and put that in DMZ? If someone have implemented same model before please share your experience and security risk involved? Cheers, Prateek