Ok, that sounds like a workable configuration. Although, currently I'm not planning to move AV/AS to a separate server, as I have no available hardware (and I'm happy with the quality of Zimbra's AV after much configuration). What I'd love would be to setup the same logical path as you have, but within Zimbra itself.