If you do deploy the appliance as a email firewall, ie on an unprotected network, ensure the management interface is on a protected network.There are no application level security controls for Authentication, brute forcing the admin password as it is...
It is not recommended in putting the C100 in front of the firewall. Even though the appliance is hardened you should put the appliance behind the firewall and port forward port 25 to the appliance. Ensure your firewall is not terminating port 25 and ...
Creating a content filter with just an action and applying it to a mail policy will mean that content filter will fire every time that mail policy fires as there would be no conditions on when it should fire.
Heres a video on implementing Safe Search in the WSA prior to the 7 release.Only works with Google and Yahoo and with some tweaking possible some other engines as well.http://www.videokb.com/?ShowMe=majiuRMxoNRCheersShane