If your customers are under a single domain, and until such time ZCS6 is implemented, then you could look at putting something like
::: Official Home Page for MailScanner - Anti-Virus and Anti-Spam Filter ::: in-front of ZCS combined with
http://mailwatch.sourceforge.net so that they can control their own individual SPAM settings.