>as crazy as it sounds, it is possible to setup things in such a way as to run no AV. You have to have a very tight perimeter, good policies, access control etc. Not crazy at all. Sane, actually. The problem is, the decision to run AV comes from management.