Broken PMTUD for . + TLD servers, was: Re: Smallest Transit MTU

A PIX firewall can handle EDNS fine. It just has to be told
  what is the maximum EDNS size being advertised by the internal
  clients. The defaults assume there is no EDNS (e.g. 512).

Yes, it is correct.