We are referring to AV program to protect the computer itself, not any AV program used by ISA as part of its processes. John Tolmachoff Engineer/Consultant/Owner eServices For You -----Original Message----- From: Bakari Allen [mailto:bakari.allen@xxxxxxxxx] Sent: Friday, November 07, 2003 9:29 AM To: [ISAserver.org Discussion List] Subject: [isalist] RE: Removing Terminal Services from an ISA system http://www.ISAserver.org Maybe I am grabbing the donkey by the tail here, but are you suggesting that the ISA-aware AV products should not be installed on the firewall to protect the network or just to protect the firewall itself? Bakari Allen ballen@xxxxxxxxx -----Original Message----- From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxxxxxxxxx] Sent: Friday, November 07, 2003 10:54 AM To: [ISAserver.org Discussion List] Subject: [isalist] RE: Removing Terminal Services from an ISA system http://www.ISAserver.org Hi John, Excellent point. Maybe I should rethink my approach to AV on the firewall. I figure that if no one has write access to the firewall from a network location, and I don't run any client software on the firewall, that I should be fairly safe. Can you think of a scenario that would allow a virus onto the box given those parameters? (excluding the possibility that someone brings a virus infected CD, floppy or USB "drive" to the firewall) Thanks! Tom ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: johnlist@xxxxxxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')