More is always better. If you have an upstream mail server, keep using it. Then have it forward to UTM for a second look. If a message passes both tests, then forward to your mail server. The cost of keeping both spam filters in operation is probably money well spent. The downside risk of a successful penetration is not worth trying to save a few pennies on the cost of spam filtering.
↧