Well, you could upgrade to SP2 and use all the free products that come with
it (IMF, Sender-ID filtering, etc.) for filtering spam. However, they
don't really do much to protect against viruses, and seeing as money is no
object then you might want to look at getting yourself a decent firewall
that has security+AV+spamblocking services at the gateway as well as a
decent "server based" solution. I have a Watchguard Firebox X500 with its
SpamBlocker and GAV services installed, and then Symantec Ent. Edition for
all my desktops and servers, including Exchange 2003, and that works well
for me. For email on the desktop side you configure the AV client to
protect the Exchange mailbox it connects to. On your Exchange server you
install Mail Security for Exchange to protect the Exchange server. You will
need to set all this up, but once its done you shouldn't need to redress it,
and the users don't think about it all - it all happens automatically in the
background, configured and managed centrally on the AV server that the
clients belong to. That said, setup isn't rocket science and depending on
the support licence you get you should be able to call someone up and have
them walk you through any setup issues or changes it if the manuals get a
bit heavy. If money really is no object you can probably pay someone to
come round and configure it for you, and after that it should just run
itself if they have done it properly. I still think that even though it is
a hassle someone should pick up the books and get their head around the
basic setup and configuration steps and concepts. If you want it done
properly, then you had best do it yourself, and I don't know of a solution
that discovers all nodes on the network, identifies their role, and deploys
and configures itself just how you would have done, but Symantec Enterprise
Edition is quite easy to use and there is plenty of good of support for it.
HTH,
Jarryd