PMG Best Practices for a New(ish) Admin

bs_stkr02

New Member
Nov 17, 2025
1
0
1
Hi,

Recently added another hat to myself, now managing bits and pieces of my small MSP's internal systems.

We have Exchange 2019 now sitting behind PMG for filtering and I'm curious what other more experienced people recommend for the setup, beyond what I already have.

Currently, inbound mail (on port 25) is forwarded to PMG, then relayed to Exchange. I have Unbound set up with 3 DNSBLs (Spamhaus DQS, Spamcop, and Surriel); threshold is 2, Spamhaus weight is 2, the others are 1.

This seems to do a pretty solid job of catching a lot of the generic spam (SEO marketing, sketchy senders, etc) but there are still the occasional emails slipping through (assuming new IPs or domains).

So, what are my options for targeting these emails? I have Bayes and AWL disabled per the official recommendations but would be happy to play around with manually training Bayes if there's a guide.

Other than that, happy to accept any recommendations while I'm still learning :)