Inside or Outside the gateway is perfectly fine. In fact all my AV and Spam stuff is done BEFORE the gateway.

NEVER ON THE GATEWAY!

The router is there for one reason and one reason only. To route traffic.