>They claim to be able to keep client machines on the network virus free? >I really didn't think you could do this with a firewall. (call me dumb) Well you know, CA eTrust has a centrally managed anti-virus solution that can be deployed over RPC transparently and it does just that -- it *claim* to eradicate viruses.