I've read a lot online about how to configure spam and AV filtering in TMG 2010 and the settings seem very flexible and powerful. What I'm not so sure about is how to effectively set the options - for example there isn't much information on 'typical' settings
to use - i.e. which file types to block, spam keywords for content filtering (on that matter is there a way to enter more than 1 word at a time?), Sender Reputation or whether enabling Sender ID is practical?
Do most people just guess these settings and tweak over time?
“What I'm not so sure about is how to effectively set the options - for example there isn't much information on 'typical' settings to use” – yes, there is no best practice article related to spam and AV filtering
configuration, its depends on your own company policy and security consideration. Here is topic about protecting your networks with TMG, you may have a look:
Microsoft is conducting an online survey to understand your opinion of the Technet Web site. If you choose to participate, the online survey will be presented to you when you leave the Technet Web site.