utm9 = slight security reduction in one area

Endpoint security. since the utm9 product no longer uses clam. You know have sophos in the utm and avira. you also use sophos at the endpoints. this means if it gets by the utm it's going to get by the endpoint(same engine and defs). I think clam should be retained in the utm or another vendor used instead of sophos in the utm.....jut my opinion.