Splitting a single ISP line through a core switch to 2 firewalls best
You have a single point of failure by connecting the single ISP line into a single switch (even if it is stacked) which is then breaking out to two firewalls. Not the worst thing in the world but ideally this