Best way to handle a DMZ?

Hi!

How do you use PMP in a DMZ?
1- install PMP in the DMZ, and do not use the LAN PMP?
2- install PMP agents, which connect to the LAN PMP? (not good since it requires a DMZ to LAN opening)
3- install a slave PMP in DMZ with database replication from LAN to DMZ? (but can a slave PMP server reset passwords? is there a way to do a partial replication of the database?)

Thanks for your help,

  LD