Vlans are pushed to the FWSM and IDSM.
According to the configuration of each the FWSM and IDSM will intercept the traffic and filet it according to the policies.
IDS will bridge the vlans if it is inline.
FWSM will be a firewall L3 device between thee vlans in routed mode or a bridge in bridged mode.
I hope it answers you question.
PK