I see that lots of email appliances are big into anti-spam and
anti-virus, but what about functionality for incident response?
The ideal mix of features for me would be something extremely
fast that can handle being at an inbound/outbound choke point
for up to 20,000 users, keeping detailed logs of all activity
and also a full archive of all emails inbound or outbound.