I had done a slew of testing with Sophos (mainly overhead, ease of use, etc - not actually installing a virus and seeing if it was caught) a while back and was pretty pleased with the product. I wish their Enterprise console would run on Mac OS X Server though. Guess you could see if you can virtualize it
Michael