Cisco Cisco Email Security Appliance C160 Mode D'Emploi

AsyncOS fetches the DMARC record for the sender’s domain from the DNS. 

If no record is found, AsyncOS skips the DMARC verification and continues processing. 

If the DNS lookup fails, AsyncOS takes action based on the specified DMARC verification 
profile.

Depending on DKIM and SPF verification results, AsyncOS performs DMARC verification on the 
message.

If DKIM and SPF verification is enabled, DMARC verification reuses the DKIM and SPF 
verification results.

Depending on the DMARC verification result and the specified DMARC verification profile, 
AsyncOS accepts, quarantines, or rejects the message. If the message is not rejected due to DMARC 
verification failure, AsyncOS continues processing.

AsyncOS sends an appropriate SMTP response and continues processing.

If sending of aggregate reports is enabled, AsyncOS gathers DMARC verification data and includes 
it in the daily report sent to the domain owners. For more information about the DMARC aggregate 
feedback report, see 

.

If the aggregate report size exceeds 10 MB or the size specified in the RUA tag of the 
DMARC record, AsyncOS sends delivery error reports to the domain owners.

Create a new DMARC verification profile or 
modify the default DMARC verification profile 
to meet your requirements.

(Optional) Configure global DMARC settings 
to meet your requirements. 

Configure your mail flow policies to verify 
incoming messages using DMARC.

(Optional) Configure a return address for 
DMARC feedback reports.

(Optional) Review the following:

DMARC Verification and Incoming Mail 
reports 

Messages that failed DMARC verification 
using Message Tracking