we are replacing a couple 2901 with 4331 routers since we need the increased performance that the 4300 offers. But i ran into a snag, on the 2901 I have IP inspect commands allowing those protocols back in when they originate from the inside network...