OpenFire+FastPath+Webchat real world deployment?

Just want to ask simple question about these soluiton deployment in Internet. In general, I know there must be a firewall or proxy and we will place OF, FastPath and Webchat in DMZ and helpdesk folks sit and work with Spark inside the intranet. I believe there must be actual deployment documentation including the security recommendation out there, can anyone share this info?