We are wondering,if it would be possible to use for example 5506x in transparent mode and connect it between two switches. Then it should control the ip traffic in all vlans. With Sophos UTM I know, this works (you even do not have to have IP address...