Next to users visiting sites that one executive coined "objectionable" (exec-speak for a poisoned combination of adult, music/file-sharing and social engineered sites) the next greatest productivity sieve for IT to deal with is the cacophony that arises via "objectionable e-mail" (AKA spam).
You can see worldwide spam has been trending up over the past decade - costing billions in bandwidth and software/hardware trying to stem the tide:

At my last company users received an average of 150 spam messages a day... if you're spending 5 seconds looking at each to flesh out the false positives each day that rounds out to around 50 hours per user a year - that number becomes staggering when one considers the lost productivity, not to mention its dual function as useless info medium and virus front door. While there was a Barracuda in place it simply did not do the job.
While many software vendors offer desktop and enterprise solutions they share a weakness (in my opinion): the "solution" resides behind your mail gateway. Half the battle in network intrusion detection/prevention is not allowing the data to even make it to your WAN. What's a beleaguered IT lead to do?
The good news is there are many solutions being offered - the best-of-breed happen to be hosted... The Big Two in this space are Google (weaseled their way into the space by absorbing Postini) and MessageLabs (in turn gobbled up by Symantec recently).
Both services employ a similar model - instead of having your e-mail delivered from the Internet straight to you it's routed through their datacenter, where it's content is scrubbed and sent on its way. While there are a couple of extra "hops" from point-to-point both have Grade-A datacenters with superfast 'Net connections so you'll never notice.

The main reason to outsource spam/virus filtering is services like MessageLabs & Postini is this - they do it right, blocking 99.9% or better and practically ALL virus/malware. After implementing ML at my last gig 1.9 million messages were blocked - that averages to around 6,000 spams that users didn't have to bother with. And the service also did a super job blocking viruses and accounting for "false positives." Finally, the cost is not prohibitive - check out the links and you'll get pricing (besides, can you afford NOT to address this)?
Sometimes outsourcing is a necessary evil - that could not be further from the truth in this case... stick with the players in this instance and you'll get an ovation at your Annual Meeting :-)




