Cisco Cisco Email Security Appliance X1050 Guía Del Usuario
19-38
Cisco AsyncOS 8.5.5 for Email Security User Guide
Chapter 19 Email Authentication
DMARC Verification
Step 2
Click the incoming mail policy for the listener where you want to perform verification.
Step 3
In the Security Features section of the mail flow policy, enable DMARC Verification by choosing On.
Step 4
Select the DMARC verification profile that you want to use for the policy.
Step 5
(Optional) Enable sending of DMARC aggregate feedback reports to email addresses in the RUA tag of
DMARC-enabled domains from whom messages are received.
DMARC-enabled domains from whom messages are received.
Aggregate feedback reports are generated daily.
Step 6
Submit and commit your changes.
DMARC Verification Logs
Log messages are added to the mail logs during the following stages of DMARC verification.
•
DMARC verification attempted on a message
•
DMARC verification is complete
•
DMARC verification details including DKIM and SPF alignment results
•
DMARC verification on a message is skipped
•
DMARC record is fetched and parsed or DNS failures
•
DMARC aggregate report delivery for a domain failed
•
Error report generated for a domain
•
Error report delivery for a domain succeeded
•
Error report delivery for a domain failed
Configure a Return Address for DMARC Feedback Reports
Procedure
Step 1
Choose System Administration > Return Addresses.
Step 2
Click Edit Settings.
Step 3
Provide a return address for DMARC aggregate feedback reports.
Step 4
Submit and commit your changes.
DMARC Aggregate Reports
DMARC relies on a feedback mechanism to enforce domain owner policies safely and in a scalable
manner. This feedback mechanism helps the domain owners to strengthen their authentication
deployments.
manner. This feedback mechanism helps the domain owners to strengthen their authentication
deployments.
If you are using AsyncOS to perform DMARC verification and you have enabled sending of aggregate
feedback reports in the mail flow policy, AsyncOS generates aggregate feedback reports daily, and sends
it to the domain owners. These reports are in XML format and are archived into a GZip file.
feedback reports in the mail flow policy, AsyncOS generates aggregate feedback reports daily, and sends
it to the domain owners. These reports are in XML format and are archived into a GZip file.