Citrix is on a different box, as is AD, we're going to be using Google postini for AV and spam filtering apparently:

http://www.google.co.uk/postini/compare.html