troubleshooting tips

show ip access-list #
show ip access-lists
show ip inspect name NAME
show ip inspect session -- current sessions
show ip inspect all -- both of above

ip inspect hashtable { 1024 | 2048 | 4096 | 8192 }
  -- default is 1024

to config to inspect ESMTP protocol
enable
configure terminal
ip inspect name NAME esmtp 
interface eth0/1 
ip inspect NAME in

Enabling HTTP inspection with or without any option triggers the Java
applet scanner, which is CPU intensive. The only way to stop the Java
applet scanner is to specify the java-list access-list option.
Configuring URL filtering without enabling the java-list access-list
option will severely impact performance.