HI Everyody,

 I have a question about the Gateway Implementation,for example i have a 6100 appliance: 
   We want just to block the internet acess for clients that have old virus defs , with a popup message appearing on the screen.
 Tthe diagram http://img682.imageshack.us/i/poofconcept.gif/ shows how we are using and testing in our enviroment,but we are having a lot of problems,

My questions:

Maybe a simple host integrity is enough ,so the appliance is unnecessary??
The enforcer function gateway only works with IPsec/ Vpn ?

PLease i´m lost with this SNAC

Thanks,