Hello, I got a strange behavior. I want to stop IM for some specific IP, when I enable Inspection for IM (policy-map inspection im to drop the traffic) MSN is actually blocked how ever this users cannot send emails. Any idea or bug? ACL to allow some  users and the rest shouldn't have msn access-list MSN extended deny ip object-group VIP any access-list MSN extended permit ip any any class-map MSN match access-list MSN class-map type inspect im match-all MESSENGER match protocol msn-im policy-map type inspect im MESSENGER parameters class MESSENGER   reset log policy-map INSIDE class MSN   inspect im  MESSENGER service-policy INSIDE interface inside ASA-XXXX(config-pmap)# sh service-policy | inc im       Inspect: im MESSENGER, packet 64896, drop 0, reset-drop 9 ESMTP inspection is enabled and everything works perfect when I disable the IM Inspection Inspect: esmtp _default_esmtp_map, packet 2916, drop 0, reset-drop 0 something weird that I noticed is the following log when I enable IM Inspection and emails stop working Jul 26 2012 17:11:05: %ASA-4-733100: [ Scanning] drop rate-1 exceeded. Current burst rate is 527 per second, max configured rate is 10; Current average rate is 466 per second, max configured rate is 5; Cumulative total count is 279915 Jul 26 2012 17:11:05: %ASA-4-733100: [ Scanning] drop rate-2 exceeded. Current burst rate is 87 per second, max configured rate is 8; Current average rate is 151 per second, max configured rate is 4; Cumulative total count is 545514 Jul 26 2012 17:11:05: %ASA-4-733100: [ SYN attack] drop rate-1 exceeded. Current burst rate is 527 per second, max configured rate is 200; Current average rate is 466 per second, max configured rate is 100; Cumulative total count is 279610 Jul 26 2012 17:11:05: %ASA-4-733100: [ SYN attack] drop rate-2 exceeded. Current burst rate is 87 per second, max configured rate is 160; Current average rate is 150 per second, max configured rate is 80; Cumulative total count is 543537 thanks ... View more