> -----Original Message-----
> From: Perfigo SecureSmart and CleanMachines Discussion List 
> How are some of you managing 
> this? Do you just setup an ACL using the CCA role policies?
> We are running our server in Real-IP mode.
> 
> The application for this is we are moving our wireless 
> towards CCA and we want to offer various wireless vlans with 
> various levels of network access.


We never had ACL's at the edge, but Policies in CCA is what we use now.
Example, we have a Block on all internal addresses, if you are a
student.  (with some exceptions, like servers, and certain printer
servers)