I have a couple Cisco PIX 525′s in production and hopefully replacing them soon. But one thing that can drive you nuts if you forget is that:
The no access-list command removes an access-list command from the configuration. If you remove all the access-list command statements in an access list, the no access-list command also removes the corresponding access-group command from the configuration.