where do you implement the Cisco VPN 3000 Series Concentrator?

According to SAFE SMR guidelines, where do you implement the Cisco VPN 3000 Series Concentrator?

A.
In front of the Internet access router.

B.
Behind the PIX Firewall and parallel to the Internet access router.

C.
Behind the Internet access router and parallel to the PIX Firewall.

D.
Behind the corporate network module.

Explanation:

Reference: SAFE: Extending the Security Blueprint to Small, Midsize, and Remote-User Networks Page 59