Re: PCI DSS & Firewalls

> 5.1.1 Ensure that all anti-virus programs are capable of detecting, 
> removing and protecting against all known types of malicious software.
>
> [Honestly?  All TYPES?  Every time?]

Hmm, all known types... 
I'm really surprised it doesn't say all UN-known types, too. That's where
the risk really is.

...of malicious software.  
Is the exploitable application the offender or the data that tries to get in
and  trigger the exploit? Which one do I delete or protect against? The
programs that read the PDF or the PDF itself?