Newly Registered domains
Blocking newly registered domains would be a great help. I would say a large majority of the phishing, spam, and malware emails we received are from newly registered domains (NRD). Bad guys create new domains all day long to used to launch attacks. On our firewall we can block those sites as a category. It would be helpful if this could be a setting in the email policies to block these as well.