IMO the best approach is to place a *nix host running software such as Clam to scan all traffic - incoming and outgoing between your network and the internet. Care must be taken to size the setup properly or it can become a bottleneck.