for clients that don't have anything to lose, and don't like alerts. I can't attest to endpoint solutions, because my clients that use VPN usually use UTM appliances that have steaming AV/AM service; so I really have no say there, except that my sister has used the ZoneAlarm Z100G to great success along that line. Unfortunately CheckPoint had canceled that hardware series last I checked. They still support the services though.