Using the MAPI connector triggers the following alert
#ET SCAN NMAP -sA (1)
Its emerging Threats as compliment to basic SNORT ruleset.
When cleared, it works fine again.
It seems to be doing a rapid port scan on the server and genrating this traffic, both src and dst gets blocked.