Yay, got my new 5520 working this morning. did firm up that my crappy little actiontec didn't like to route but for the inside network, so I did have to configure NAT on the fw outside interface for my actiontech inside network, then it all worked.
Cool. I did a similar setup with my home router, had to do all the NAT in the firewall before it got to the ISP gear.