Google Apps has some of the best spam & virus blocking technology around integrated into Google Apps.
Messages Google believes may be spam are delivered to a folder (well, a label) called "Spam". Messages remaining in this folder for more than 30 days are automatically deleted.
Google will learn what you consider spam. Use the "Report spam" and "Not spam" buttons to train Google spam filters.