Or there is real protection... Cisco Security Agent. Firewall / AV / Application watching / NAC all rolled into one..