B2B Email Deliverability: Getting Past Proofpoint, Mimecast, and Corporate Spam Filters

Best Practices

B2B email deliverability is harder than B2C. Consumer mailbox providers like Gmail and Yahoo use reputation-based filtering that adapts to user behavior. Corporate environments use dedicated security gateways — Proofpoint, Mimecast, Barracuda, Cisco Secure Email — that apply much stricter rules before email ever reaches the inbox.

If your emails reach Gmail fine but bounce or disappear when sent to corporate addresses, the gateway is likely the problem. Here's how to navigate it.

How Corporate Email Filtering Works

Most companies route inbound email through a security gateway before it reaches Microsoft 365 or Google Workspace:

1. Your email reaches the gateway (Proofpoint, Mimecast, etc.)
2. The gateway checks authentication (SPF, DKIM, DMARC)
3. It checks blacklists, content, sender reputation, and attachments
4. If the email passes, it's delivered to the user's inbox
5. If it fails, it's quarantined, rejected, or silently dropped

The key difference from consumer filtering: corporate gateways are configured by IT teams with policies that vary by organization. One company's Proofpoint may block emails that another's allows.

The Major Gateways and Their Quirks

Proofpoint

Proofpoint is the most widely used enterprise email security platform. It's strict about:

• SPF alignment — Proofpoint checks not just whether SPF passes but whether the sending IP matches the claimed domain
• DKIM verification — Invalid or missing DKIM signatures are treated more harshly than in consumer email
• Content analysis — Proofpoint's content filtering is sophisticated. Marketing language, excessive links, and image-heavy emails trigger higher scores
• URL reputation — Every link in your email is checked against Proofpoint's threat database. Shortened URLs or links to new domains are flagged

Proofpoint SPF tip: If you're sending to Proofpoint-protected organizations, ensure your SPF record strictly aligns with your From domain. Proofpoint is less forgiving of alignment issues than Gmail.

Mimecast

Mimecast applies layered filtering:

• Sender reputation scoring — Mimecast maintains its own reputation database independent of major blacklists
• Attachment sandboxing — Files are opened in a sandbox to check for malware. PDFs and Office documents are scrutinized
• URL rewriting — Mimecast rewrites URLs in emails to route through their scanning proxy
• Greylisting — Some Mimecast configurations temporarily reject first-time senders, accepting the retry

Mimecast DKIM setup: Organizations using Mimecast need their DKIM configuration to account for Mimecast's relay. If you're on the receiving side and using Mimecast, ensure DKIM records are properly set up through Mimecast's admin console.

Barracuda

Barracuda is popular with mid-size businesses:

• Barracuda Reputation Block List (BRBL) — Barracuda maintains its own blacklist. Check your status at barracudacentral.org
• Intent analysis — Barracuda evaluates the purpose of an email, scoring commercial intent higher
• Rate limiting — Barracuda may throttle senders who send too many emails in a short window

Microsoft Defender for Office 365

Many organizations layer Microsoft Defender on top of Exchange Online:

• Safe Links — URLs are scanned and rewritten
• Safe Attachments — Files are detonated in a sandbox
• Anti-phishing policies — Strict impersonation detection can flag legitimate emails if the From name resembles an internal executive

How to Improve B2B Deliverability

1. Perfect Your Authentication

Corporate gateways don't give partial credit. Authentication must be complete:

• SPF — Record must pass and align with your From domain
• DKIM — Signatures must validate with at least 2,048-bit keys
• DMARC — Publish p=quarantine or p=reject. Gateways view p=none as a sign of immaturity

Check all three with our free deliverability checker.

2. Check Every Blacklist

Consumer providers primarily care about Spamhaus. Corporate gateways check additional lists:

Being listed on a blacklist that Gmail ignores might still block your email at corporate domains.

3. Clean Your Content

Corporate filters are more sensitive to marketing patterns:

• Avoid excessive images with little text
• Don't use URL shorteners — corporate gateways flag them as potential phishing
• Limit the number of links per email
• Avoid words and phrases that trigger commercial content scoring
• Use a consistent, recognizable sender name
• Keep attachments small and use standard formats (PDF, not .exe or .zip)

4. Send From a Reputable Domain

Corporate gateways evaluate domain age and history more heavily. A brand-new domain sending B2B email will face extra scrutiny.

• Use your primary business domain, not a marketing subdomain with no history
• If you must use a new domain, warm it up gradually with low-volume, highly engaging sends
• Ensure your domain has a proper website, WHOIS information, and established DNS records

5. Respect Rate Limits

Sending a large batch of emails to a single corporate domain will trigger rate limiting. If you're reaching out to multiple contacts at the same company:

• Space out sends over hours or days
• Don't send identical content to multiple addresses at the same domain
• Personalize content to avoid triggering "bulk sender" detection

Diagnosing B2B Delivery Failures

Check Bounce Messages

Corporate gateways usually return detailed bounce messages:

No Bounce, No Delivery

The worst scenario: the email doesn't bounce but doesn't arrive. This usually means:

• The gateway quarantined the email for admin review
• The email went to the recipient's junk folder within their corporate mailbox
• The gateway silently dropped the message

In these cases, ask the recipient to check their quarantine or contact their IT team to whitelist your domain.

Request Whitelisting

For important B2B relationships, ask recipients to have their IT team:

• Add your sending domain to the gateway's allow list
• Add your sending IP to the allowed senders
• Create a transport rule that bypasses spam filtering for your domain

This isn't scalable for prospecting, but it's appropriate for ongoing business communication.