SL> Sure - deep packet inspection is typically a combination of IDS/IPS
 SL> and a stateful firewall. 

 SL> As for scanning encrypted streams, not sure how exactly that would
 SL> work without some kind of man in the middle attack. 

leave out the word "attack" and you have it right... a MitM
Attack is one where there is a MitM that is purposely looking at your
traffic for the purposes of hijacking data across the encrypted link...
there is quite a difference ;)

in fact, there are many ISPs who are doing the same thing (using a MitM)
specifically for the purposes of protecting their networks and
clients/customers :)

)\/(ark