Hi Damien,
first, sorry for the late reply.
1. You need to have a virus protection on every machine (every workstation and every server) to be effective. The server can't control what's happening on the workstations (floppy disks, USB drives, Internet downloads...).
2. Are you talking about the server or a workstation? On the server, the mail shield is typically inactive because no mail clients are installed there...