virtual reference - IM security?

For those of you doing reference services using Instant Messaging, a bunch of questions:

- Are you doing anything about security?  For example, is the IM machine on the same network as the rest of your library machines, or is it isolated (e.g. by firewall)?
- What software do you use?  Do you support messaging from multiple networks or just from one?  Most library IM addresses I have seen are for AIM.  What about MSN?  What about open-source, multiple network software like GAIM?
- Do you log the sessions?
- Do you take any measures to limit/prevent instant messaging spam (aka "spim")?  Has it been a problem?

Any other feedback/suggestions?

Comments

[Christina Pikas]

They Schmidt and Stephens did answer a few of these questions in their presentation (my notes here: http://christinaslibraryrant.blogspot.com/2005/03/cil2005-collaboration-im-breaking-down.html)
- Are you doing anything about security? For example, is the IM machine on the same network as the rest of your library machines, or is it isolated (e.g. by firewall)?
They use Trillian and/or GAIM and load it locally on the various machines at the reference desk -- they are both from small public libraries. They didn't mention any other security measures.

- What software do you use?
They support the 3 major services (MSN, AIM, and Yahoo)

- Do you log the sessions?
They keep the logs but are transparent to the users that they will be doing so.