We use messagelabs.. Probably the most expensive solution. But if you are looking for a fully managed spam solution I don't think their offering can be beat. There system is very good at detecting new previously unknown threats. They are also very good at identifying any people that may have received a bad payload that was previously unknown.