I have a client running the Cisco SDM software. He's going to be running a colocation service and wants an easy and fast way to work with a firewall and lock down or not his clients. He bought a 2811 because he read it could do all the things he'd like to, but he only have the IPBASE version of the IOS, v. 12.4(3f). He wants to be able to use the firewall ability in the SDM, as well as IPSec/VPN, IPS and NAC if at all possible. Can anyone help me figure out which of the versions of 12.4 he should be running?