[oc-flyfish]

And any tech worth his name knows for a fact that a brand new virus can't be scanned for on the server since the scanner doesn't have it in it's virus def files yet. It's ultimately up to your users not to be hair brained idiots

True, but most server-based antivirus solutions can also block based on extension. I use Symantec Norton Anti Virus for Exchange. Check it out.

[okie_tech]

I've used the Norton Enterprise edition for Exchange but to block by extension can cause more problems than it's worth, politically and socially in the office space. I have not been in a position where I can rule over the end users with an iron fist. I do service work and therefore typically do not work for the company that owns the network and such heavy handed solutions never go well with the customer.