When I do a wireshark capture on a switchport, I see my client's SYN go out and the SYN ACK come back within the same second. However, on the FWSM module sitting on the same switch, the SYN ACK doesn't arrive until after 30 sec and so it gets dropped...