Thanks everyone, I've heard good things about Sophos UTM, they say they're AV is right up there after Kaspersky and Bitdefender - but that wasn't the impression I had. (AV Comparatives is the resource I use), but I thought maybe I was missing something (I've seen their AV in several SMB). They had me on their sales pitch of being able to address security from multiple angles which sounded good (if we got a Sophos UTM in the future), but the separate UTM does make sense.