That makes me wonder about the following hypothetical scenario: I want machines to be running an antivirus, so in my posture policy, I put in an application check for Avast.  A machine with Avast installed and running connects to the network, and bec...