The guidance stops short of banning any software outright, but warns that national agencies should avoid using Russian anti-virus software in the interest of national security.