You may want to check to see if the FW is using a L3 unicast and a L2 multicast address. If so, the switch will never build a CAM entry for the FW and flood these frames. If this is the case, you will need to configure the static L2 entries and map it to the ports that the FW is connected to.
On the router portion (same applies if the 3550 is the router), configure the static ARP entry as well.