If the end users use mail clients, you probably can make them set the smtp server to your Ironport. In this way, Ironport will take all the mails at the first step and route it back to your Zimbra after performing AS/AV scanning.
But if end users use browser... I don't see if this can be done! |