Spyware protection

Does anyone out here think the list below is NOT enough protection against spyware?
– Cisco pix (locked down)
– Anitvirus updated weekly
– IE having all scripts, active X….etc turn off
– Win XP and 2k end users in “user” group only

I don’t yet have an enterprise solution to guard against spyware and wonder if it is really necessary.