We use Computer Associates InoculatIT the Server\Client version.

I don't know that it's the best, but they come out with updates very regularly & we have yet to suffer a virus related problem on our 500 user network.

I'm not the support analyst responsible for this product, but the guy who is says their support (Phone) is pretty bad.