If I may suggest...
For endpoint security (e.g. making sure that laptop/endpoint virus defs are up to date), Novell ZESM is a decent product. A real pain in the *** to install, but once running it's very stable.
5500G switches don't currently support acls applied to vlans. Also, the release notes say that acl's can be applied only inbound (not outbound) to an interface.