It's now a common daily occurrence to receive PE viruses such as the recent MyDoom via e-mail. On Windows platforms, nine out of ten of last year's top viruses were spread via e-mail. While staff training is the best deterrent, wouldn't it be helpful to prevent users opening un-trusted executables yet being non-restrictive on the opening documents and other less harmful files? With typical figures saying 70% of network related attacks come from within your organisation doesn't it make sense to prevent users running port scanners or other executable tools from floppy disk or CDROM drives yet still allowing the use of these drives to transfer files and maintain office efficiency. Or perhaps you have caught users trying to install software on machines. While operating systems are becoming more secure, it is still possible to install programs as a user or run programs directly from the CDROM drive. Other users may choose to play games from CDROM drives? The speed at which viruses can propagate must be a concern for all Administrators. Most sites now have automatic updates running which frequently update their scanners, sometimes as frequently as twice daily.