I find Sprint Email Protection Services (SEPS) to be pretty good. It is a 3rd party service that utilizes a variety of methods for filtering inbound and outbound mail. We simply point our mailserver to it's group of servers and it takes care of the rest. Since we have about 300 or so users in our org using email, it costs us $1 per month per user