I too have had great experience with ISS. I've never done much with their desktop products but i find their Inline Proventia G to be great. As with any solution, you do have to take some time to tune the policy that you apply to it to fit your desires. However, once you have done this, it does a great job of picking up on malicious activity and can block the attacks you define in mid transit.

-Ryan