Rob, It seems to me that what you need is clear security policies. Users should not be allow to install their on software and to remotelly control their workstations from home. I think that this is the main problem. To improve desktop control, and security you should use local policies. Applying local policy, since these pc are not belonging to a domain, can be a real pain in behind. If you are looking for a personal firewall try the free version of zone alarm. Where in the world are you ? Holland? We stopped in the Amsterdam airport for few hours on our way to Italy. Marco Rob Beekmans wrote: >Hei, > >I'm faced with a network were more companies use one DSL connection. >One of the companies use Citrix, here we can control everythng, no add. >software can be installed by end users >The other network though is win98 /XP clients with no server, they use >shares on each workstation to distribute data (foolish way). >One of the clients on this network has "Realtime Spy" software installed, so >it can be monitored from outside, this creates a lot of internet traffic and >it seems they can take control of her actions, we've seen downloads of over >200M of MP3 on several days. > >I've tried all things to stop it but'it seems the only way is to reinstall >the pc. >There is a ISA server acting as firewall but it sees the traffic as UNKNOWN. >The problem is that they are not in the domain where the ISA server is >working, so I can't create good rules to stop it, even with several control >software they only are designed for domain level. > >What I'm looking for is a tool to stop any traffic from any pc IP based. >any help would be welcome > >grx >Rob > >******************************************************** >This Week's Sponsor - Emergent Online >EOL's Universal Printer new Features include: >Network Printing, Pagestreaming, 2400 DPI. >No Client Software Required! >http://www.go-eol.com/ >********************************************************** > >For Archives, to Unsubscribe, Subscribe or >set Digest or Vacation mode use the below link: >http://thethin.net/citrixlist.cfm > > > -- ******************************************************** This Week's Sponsor - Emergent Online EOL's Universal Printer new Features include: Network Printing, Pagestreaming, 2400 DPI. No Client Software Required! http://www.go-eol.com/ ********************************************************** For Archives, to Unsubscribe, Subscribe or set Digest or Vacation mode use the below link: http://thethin.net/citrixlist.cfm