We run Surf-Control's EMail filter. Very configurable for Spam, Profanity, Adult content, etc.. The user gets a daily email (or how ever often you configure it to send) with a link to a website on the server where they can view, delete or deliver the emails. They can also work on thier own white list there. It gives some pretty nice statistics which gave us a good way to justify the cost to Admin Row, see below: # of SPAM Emails Total # of Emails Percentage of SPAM December-04 78,315 122,837 63.8% January-05 224,026 361,629 61.9% February-05 202,071 331,226 61.0% March-05 217,851 373,192 58.4% April-05 201,594 337,383 59.8% May-05 221,291 359,719 61.5% June-05 233,097 369,333 63.1% July-05 256,098 381,275 67.2% August-05 254,089 406,847 62.5% September-05 222,293 405,325 54.8% October-05 270,150 449,590 60.1% November-05 289,527 455,497 63.6% December-05 325,522 501,412 64.9% Total 2,995,924 4,855,265 61.7% You can also go into things like how much was adult content, how much was sales pitches, etc... It's the first device, i.e it's what our public MX record points to, then things move on to the antivirus and Zix servers. By being the first device it cuts the load on the other servers by more than half, it's been a noticable performance enhancer for the exchange servers. George Taylor Systems Programmer Regional Health Inc. -----Original Message----- From: Evan Mann [mailto:emann@xxxxxxxxxxxxxxxxxxxxx] Sent: Thursday, January 05, 2006 10:46 AM To: [ExchangeList] Subject: [exchangelist] Spam and A/V appliances. http://www.MSExchange.org/ Hello all. I'm looking for input on an SMTP e-mail appliances for spam/content filtering and antivirus. I prefer an appliance over software I run on a server, but I'll also accept input for software based products. My exchange front end does nothing but SMTP transport work, and A/V scanning. It has no stores on it. My current spam product runs on the back end servers, because it uses SMTP Event Sink to pick off spam. This means I have to let spam come to the back end server, causes unnecessary load. I want something to put all the way in front to reduce these loads. Two of the popular names in appliances are Ironmail and Barracuda, so I'm obviously interested in those. I'm also looking at St. Bernanrds ePrism, as we have their iPrism already. One of my absolute requirements is how spam is managed. I must have ability for end users to manage their spam and it's settings. In conjunction with global black/white lists Users must have the ability to maintain their own (through web interface, directly in outlook, whatever). The user must be able to view the items in their quarantine. The key to his is the USER has some control. I cannot utilize a device where an admin has to go digging through quarantines for legit mail, or where an admin has to approve a mail from being released from the quarantine. Beyond that, I'm somewhat flexible. I'll continue to use my Exchange front end A/V, but I want some decent A/V functionality in the appliance to reduce some scan load. Based on this, can those of you who have used any of the boxes I've mentioned, and others, provide input on if they would meet my requirements, and what your experiences have been. ***Note: The information contained in this message, including any attachments, may be privileged, confidential, and protected from disclosure. If the reader of this message is not the intended recipient, or an employee or agent responsible for delivering this message to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this communication in error, please notify the Sender immediately by a "reply to sender only" message and destroy all electronic or paper copies of the communication, including any attachments.