Spam not filtering based on SCL headers

Keeebs

In the antispam logs, I can see email header, X-MS-Exchange-CrossPremises-SCL, is properly being read and identified: MICROSOFT_SPAM Microsoft says the message is spam

But the emails are still being delivered to inboxes. Can anyone advise why?
I'm trying to sort email with an SCL header >=5 and <=7 to the spam folder. TY

Keeebs

This seems to have improved the filtering.... I created

#/etc/grommunio-antispam/local.d/regexp.conf:
CUSTOM_MICROSOFT_SPAM_SCORE`` { re = "X-Forefront-Antispam-Report=/SFV:SPM/H"; description = "Custom score for Microsoft-flagged spam"; group = "upstream_spam_filters"; score = 1; }

and restarted grommunio-antispam service