I was just informed of this article http://www.symantec.com/docs/TECH200332

This is not a realistic approach to how your actual administrators go through the spam quarantine on a day-to-day basis. I constantly have to open emails to see whether or not they're 'spam or ham'. Opening multiple tabs saves me on the average of an hour a day. If this is not addressed, I'm going to switch to IronPort.