hi! Sorry some typo errors there.....what i meant is that, is there any tools or device that i can use to ease management or replace acl applied on different vlan interfaces? Can NAC achieve that?

Is there any tools that is more effective than acl to filter packet between my vlan interfaces at the 6509 core?

Thanks.

a firewall services module/ FWSM. they're very expensive though.

The problem with ACLs are that they are vulnerable to various attacks due to their 'near' stateless nature. Stateful firewalls/packet filters are therefore considered more secure. I would recommend an ASA/FWSM or at least an IOS router running an Advanced Security image (to utilize the zone-based firewall feature). There are free graphical tools provided by Cisco (SDM,ASDM etc.) that can help you manage your firewall rules graphically.

Regards

Farrukh