&gt;They might be accepted as helpful in some situations, but many security professionals would weigh the privacy against added help and recommend against them in this context.<p>I strongly disagree that there&#x27;s any privacy loss. Internal IT staff could look at your browser history and traffic if they really want to anyway (and often they are required to in specific circumstances). Why is getting IDS alerts somehow worse than this?<p>I would have an issue with my ISP deploying a universal IDS, but it&#x27;s a different story for my employer.<p>&gt;Many, hopefully most, security professionals would also disagree with requiring AV on all endpoints.<p>There are certainly much better endpoint protection solutions, like whitelisting agents or virtualizing everything, but those are typically difficult to deploy in a large enterprise. Are you suggesting an enterprise should have no endpoint protection at all? If better anti-malware solutions aren&#x27;t an option, you need <i>something</i> in the meantime. It&#x27;d be rather embarrassing if your entire network gets hit with a wormer circa 2005 because you have no AV and it slipped past your other controls.<p>I don&#x27;t run AV on my home computers, but I am very glad it&#x27;s deployed on my company&#x27;s endpoints.