With new variations of virus's, trojans, worms, malware, etc, I'm having some difficulty preventing this garbage from entering my network despite 4-5 layers of prevention beginning with spam filtering from my ISP. I'm wondering if a web security appliance might be a consideration and was wondering what others do to continue to allow users access to the internet but continue to keep their network safe and clean. Any feedback would be very welcome at this point.
To offer 2 side notes, my boss wants to use clustered proxy servers (I don't think this is the solution) and we continue to get hit with newer versions "Personal AV".
Thanks all in advance for your input.