I am considering a Barracuda web filter, but i did see others such as IronPort, SonicWall.
I am however, NOT considering websense. I have it and currently hate it. I would rather have hardware rather than software.
Cool. The ACL RESTRICT_SMTP is applied to the inside_vlan17 interface. When you move the IP over to gi0/3, remove the ACL then apply to the new interface.
no access-group RESTRICT_SMTP in interface inside_vlan17
access-group RESTRICT_SMTP in interface new_inside_vlan17