|
Your best 'defense' is sticking a $50 Linksys in front of it, really - but if you're trying to protect an idiot from doing dumb things, you do not want ZoneAlarm. Tiny's been bought out by CA, so that's dead. Sygate, well, yeah, that's dead.
I usually just enforce a port 80 redirect through a caching squid box with filters in place.
You could put the big blue E icon over firefox.exe, and 99% of the people wouldn't notice.
|