what are the deficiencies in embedded network anti-virus solutions? i imagine they can be nowhere near as comprehensive as anti-virus solutions that are installed locally on a machine.

besides a general critique of embedded network av solutions, i'm specifically interested in comments about the network av solution offered by sonicwall as an add-on to their firewall product.

interestingly, sonicwall says they use kav's engine (or mcafee--your choice) for email scanning, although any other kinds of av scanning they perform appear to use mcafee's engine.

has anyone here used any type of embedded network av solution? and if so, how would you compare it to a locally installed copy of kav?

All embedded AV-Engines are OEM contracts by the e.g. Firewall manufactor - therefore noone (except) the manufactor know how the AV-Scan-Engine is used!!
IF they use for e.g. the Kaspersky engine even the support is in firewall manufactor site only and not on Kaspersky site.
btw. Kaspersky has the most OEM Contracts as far as i know...