Zone Based firewall comment

Well, after beating my head against this for awhile I have come to three
conclusions (call it venting if you will):
1.) Security zones are cool
2.) Inspect maps are overly complex pieces of crap
3.) Specialized inspect maps are even bigger pieces of crap

I find myself hoping they won't get too carried away with this subject.
Working out all of the possible regex's, etc and nesting of
relationships could easily take me 20 hours for a complex enough
configuration. Can anyone tell me if I'm wasting my time going through
the lower levels of hell here?

-- 
Chris Proctor
--
This message was scanned by ESVA and is believed to be clean.
Blogs and organic groups at http://www.ccie.net