Your consultant should be slapped!
This doesn't directly answer your question, but may be useful info. Give some serious thought to using a hosted anti-spam provider. you won't have to mess with anti-spam settings or have the junk even reach your Internet connection. I recommend Exchange Online Protection from Microsoft, but really, most of the services out there offer somewhat similar protection at least.
