Hello, If I have ALC and IPS activate on the same interface. Which one will be run first ? It could look something like : interface FastEthernet0/1 description FE0/1-WAN ip address xx.xx.xx.xx 255.255.255.240 ip access-group 101 in ip ips ips-wan in Regards, Julien.