Internal Firewall internal Attacks say bachaye ga For example employee and External Attacks out off people for example Hackers etc.
I will go with the third option between the internal firewall and external firewall option to place web server in the organization.
Advantage of the locating the server in between firewall is that the one to shield your internal network and one to shield your web server.