Design question incorporating a firewall

Hi,   I'm stuck with some questions about a design that includes a firewall. I have the following two possible setups, where situation 1 seems more lenient and situation 2 would always require ch...