Tonight we successfully swapped in our pair of new PIX515e firewalls, configured for High Availability with separate feeds to separate switches on our upstream providers network. Hopefully, nobody noticed a thing :)