Symantec Mail Security for SMTP

I am trying to set up mail security for smtp for our corporate network. The scenoria is the brightmail is going to be in DMZ and our exchange server is in LAN.
During the set up process, do I need to point the mx records from my isp to brightmail?
And at my firewall, I forward the ports to my internal exchage server, right?