Bradford Networks has a SuSE Linux-based system of network policy enforcement. We use it at Bloomsburg University and it's pretty well eliminated our ResNet virus problem.
Fools ignore complexity. Pragmatists suffer it. Some can avoid it. Geniuses remove it. -- Perlis's Programming Proverb #58, SIGPLAN Notices, Sept. 1982