It already happened that Cisco IronPort has blocked legitimate sites, like www.rp-photonics.com, and from the service desk reply I got it appeared that this was not the only case. Of course one gets used to go around the blocks with proxies, but I don't see the point in blocking stuff in the first place.