scan internal to internal mail at the exchange 2007

we will install Ironport soon, the problem that i need to scan the internal mails between the users in the same active directory. so the internal mail must be routed through the hub transport to ironport scaned and then back to the exchange hub ?

how can that be configured ??