True enough. You had mentioned it was doable with GFI and I though it might be useful to mention how it could be done via surfcontrol as well. Personally, I blocked WMF files at ISA and with my surfcontrol filter, just in case. Brian -----Original Message----- From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxx] Sent: Wednesday, January 04, 2006 2:41 PM To: [ISAserver.org Discussion List] Subject: [isalist] RE: WMF Vulnerability Hi Brian, You don't need SurfControl just to block .wmf files, you can use the OOB ISA firewall to do that. Tom