I'm pretty sure that most IM sessions aren't encrypted, so it wouldn't be difficult to monitor traffic at the firewall end. There are actually a bunch of products out there (like the new Microsoft Live Communication Server) that use IM archiving as a feature (since for some companies it's a...