Typical setup is
INTERNET/WAN <-----> Firewall <----> PMG <----> Mail server
So with your firewall just create a NAT rule that routes port 587 to your Mail Server, not your PMG. This makes sense anyways because PMG just checks incoming and outgoing mail, 465, 587, 143, 993 are ports used for...