Hey guys and gals. I have a situation where my client has 2 scientific devices attached to PCs that simply cannot run AV software . We will call them HYDRA devices. We do not want any devices on the network without AV. The problem is these devices generate and send data to a share on a server called DMZ1. The data is then pulled to a third location that IS on the internal network. I know the simple answer here is remove the gateway from the HYDRA devices so they cant get online but that's not possible. My goal is to put the Hydra devices and DMZ1 in a DMZ type environment. DMZ can run AV with no problem. Any suggestions and does this make sense at all?