From my inside pix users can go to internet. I configure PAT in PIX. I found one of use always eastablish session to internet and all time internet download file. so from My pix firewall can i do the stop of seesion for that time. I can not want permanet stop to access internet, just when he acess more time stay in net then time i want stop his NAT session. It is possible in Pix. I found only KILL command for stop telnet and ssh session stop.