you might want to consider the impact of having the spam filter on your firewall, as it can consume considerable resources, what with frequent updates and all.
if you want to avoid having to tinker with a dedicated spam solution, why not subscribe to a perimeter service provider, such as Electric Mail, which will filter your mail outside of your network, protect your port 25, and then deliver your mail to you?
Oren Friedman