Work around disabling stric TLS, allowing to old, not updated Exchange server (in my case) to connect to Postfix at Plesk:
In /etc/postfix/main.cf , comment lines and insert the last one, as above:
#smtpd_tls_ciphers = medium
#smtpd_tls_mandatory_ciphers = medium
#tls_medium_cipherlist =...
In my case, i just stopped the bind service, clean all files at /var/lib/cache , start the bind again and click on Resync at Slave DNS extension at Plesk.