I had a situation the other day where upon placing IP Admissions on the LAN interface, end users at behind that ISR were content-scanned properly for a few moments, then they couldn't access the Internet at all, then they could again for a few minute...