From my experience, if you don't have a scanning gateway for Domino, make sure the server-based A/V excludes all .nsf files - otherwise you'll end up quarantining user's mailboxes. You'll have to rely on real-time A/V protection for Notes clients at the desktop, but at least you won't get the "My mailbox is gone!" phone call.