A system and method for virus protection of computers on a local area network
(LAN)
is disclosed. The LAN's anti-virus policy is programmed into the firewall, or other
Internet access module, which applies that policy to the client computers on the
LAN. This policy might include the frequency with which the anti-virus software
is updated and the number of versions that the software is permitted to be out
of date. Any client computer not meeting the policy is not permitted to access
the Internet. The firewall can also update out of date client computers to make
them compliant with the policy.