Recently I have taken over as both onsite IT and also head of our internal IT as the last IT guy resigned on my second day. Currently they just switched to an internal Exchange 2016 server and they're getting tons of spam now. I just barely figured out how to get the SSL cert setup correct and fix all the cert errors being thrown around.
I know there are basic anti-spam features in Exchange 2016, but I was wondering if anyone had some general guidelines on how to start off. I didn't want to enable all the filtering without having a solid grasp of what I'm doing since I'm not even sure how to check what emails were blocked in case I am blocking important customer emails. Any anti-spam advice in general for Exchange 2016 would be appreciated. Thanks!