We are still having problems with some workstation sending out a virus
through the Nat. Logs are indicating that the culprit is the Nat server. If
I use the default filters along with denying all traffic, will that be the
next step in resolving this.