What you need is some tool which monitors LSPs and all IE plugins on all your computers. This can be done remotely just by reading registry entries...I am sure there is some automated tool for administrators like that... -----Original Message----- From: Greg Hess [mailto:gmh@xxxxxxxx] Sent: Tuesday, September 14, 2004 3:28 PM To: [ISAserver.org Discussion List] Subject: [isalist] RE: Spyware Issue(s) http://www.ISAserver.org Oh no, I agree it's a good thing, but during a transition from one firewall to another, it just looks bad to the end user, as I have to keep explaining why its actually better that the browser is not working. I wondered if anyone with this experience could help in that regard. What I plan on doing is putting a FAQ out on our intranet today on spyware in general and this issue in particular and using this as an impetus for mgmt to fund my corporate anti-spyware initiative. Also I'm going to put out a GPO to lock down IE more (which will mean more bit...I mean, user comments, I'm sure). Tx. Greg. -----Original Message----- From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxx] Sent: Tuesday, September 14, 2004 9:17 AM To: [ISAserver.org Discussion List] Subject: [isalist] RE: Spyware Issue(s) http://www.ISAserver.org Hi Greg, So let me get this straight. The ISA firewall is making it difficult for the spyware to phone home and that's bad? Thanks! Tom -----Original Message----- From: Greg Hess [mailto:gmh@xxxxxxxx] Sent: Monday, September 13, 2004 12:57 PM To: [ISAserver.org Discussion List] Subject: [isalist] Spyware Issue(s) http://www.ISAserver.org Hey, we are transitioning a part of my company off of an old Checkpoint firewall and onto ISA. As we do this, spyware seems to cause many more problems with the people using ISA. Not in terms of getting it, but those who have it often have it stop them from browsing the Internet until we can get it cleaned off. Is there anything I can do to make ISA 'forgiving' enough so that this won't cause such a headache? Any advice is appreciated. Tx. Greg. ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: davidf@xxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx This mail was checked for malicious code and viruses by GFI MailSecurity. GFI MailSecurity provides email content checking, exploit detection, threats analysis and anti-virus for Exchange & SMTP servers. Viruses, Trojans, dangerous attachments and offensive content are removed automatically. Key features include: multiple virus engines; email content and attachment checking; an exploit shield; an HTML threats engine; a Trojan & Executable Scanner; and more. In addition to GFI MailSecurity, GFI also produces the GFI MailEssentials anti-spam software, the GFI FAXmaker fax server & GFI LANguard network security product ranges. For more information on our products, please visit http://www.gfi.com. This disclaimer was sent by GFI MailEssentials for Exchange/SMTP.