Ge, Just wanted to add one more thing. > * decrypted traffic handled by "black box" (in this case catalyst- > 3750 I've had very poor performance using the 3750 for PBR functions, have you tried to push any load through it? -ryan