Cisco Cisco Email Security Appliance X1050 Guía Del Usuario
18-34
Cisco AsyncOS 8.5 for Email User Guide
Chapter 18 Email Authentication
DMARC Verification
5.
Depending on the DMARC verification result and the specified DMARC verification profile,
AsyncOS accepts, quarantines, or rejects the message. If the message is not rejected due to DMARC
verification failure, AsyncOS continues processing.
AsyncOS accepts, quarantines, or rejects the message. If the message is not rejected due to DMARC
verification failure, AsyncOS continues processing.
6.
AsyncOS sends an appropriate SMTP response and continues processing.
7.
If sending of aggregate reports is enabled, AsyncOS gathers DMARC verification data and includes
it in the daily report sent to the domain owners. For more information about the DMARC aggregate
feedback report, see
it in the daily report sent to the domain owners. For more information about the DMARC aggregate
feedback report, see
.
Note
If the aggregate report size exceeds 10 MB or the size specified in the RUA tag of the
DMARC record, AsyncOS sends delivery error reports to the domain owners.
DMARC record, AsyncOS sends delivery error reports to the domain owners.
How to Verify Incoming Messages Using DMARC
Managing DMARC Verification Profiles
A DMARC verification profile is a list of parameters that the mail flow policies of the Email Security
appliance use for verifying DMARC. For example, you may want to create a stringent profile that rejects
all non-compliant messages from a particular domain and a less stringent profile that quarantines all
non-compliant messages from another domain.
appliance use for verifying DMARC. For example, you may want to create a stringent profile that rejects
all non-compliant messages from a particular domain and a less stringent profile that quarantines all
non-compliant messages from another domain.
A DMARC verification profile consists of the following information:
•
A name for the verification profile.
•
Message action to take when the policy in the DMARC record is reject.
•
Message action to take when the policy in the DMARC record is quarantine.
•
Message action in case of a temporary failure.
•
Message action in case of a permanent failure.
Table 18-5
How to Verify Incoming Messages Using DMARC
Do This
More Information
Step 1
Create a new DMARC verification profile or
modify the default DMARC verification profile
to meet your requirements.
modify the default DMARC verification profile
to meet your requirements.
Step 2
(Optional) Configure global DMARC settings
to meet your requirements.
to meet your requirements.
Step 3
Configure your mail flow policies to verify
incoming messages using DMARC.
incoming messages using DMARC.
Step 4
(Optional) Configure a return address for
DMARC feedback reports.
DMARC feedback reports.
Step 5
(Optional) Review the following:
•
DMARC Verification and Incoming Mail
reports
reports
•
Messages that failed DMARC verification
using Message Tracking
using Message Tracking
•
•
•