Network Associates Groupshield has always worked well for us, but we're still using Exchange 2003.