When Express Path mode (formerly known as services offloading) mode is enabled, only the first packets of a session goes to the Services Processing Unit (SPU). The rest of packets in services-offload mode do not go to SPU. Therefore, some security features such as stateful screen are not supported.