Yeah you just need to configure zone alarm to allow msn access, itll probably be there in the applications section but probably uncheck for internet access. Just wondering though, why are you using za on the clients when youve got a hardware router protecting you? apart from just managing application outbound.