> With the 6509's capablity to implement ACL's/VACL's in the PFC, > what extra would a FWSM give us? Stateful filtering and high-performance NAT comes to mind. They'll also buy you some application intelligence (L5, as you mentioned). -A