In reply to John Spade.

Dropping = blocking. It's always better to use stateless ACLs on routers/layer-3 switches to drop traffic than to use stateful firewalls, whenever possible: