We run Clam on the SME server for email scanning. Symantec on the Windows clients and I cannot recall having heard that anything got caught the last 3 years. As something new we run DansGuardian with Clam on a Smoothwall based firewall to catch malware, virus, etc. when browsing. This could also be done on SME if it was running in gateway mode (I run it in server mode only).