Thanks for your reply. Actually I have a Telecom customer. They use pix 525 to connect to internet. They have about 10 thousand PCs. I estimate mostly there are about 2000 PCs connecting to internet at the same time. They want to control who can access to internet, so authentication proxy is one of the solutions. But wiht authtentication proxy, one client will produce at lease one dynamic access-list. I wonder whether the pix 525 can support so many access-list.
