DMARC Analyzer - Configuring DMARC

This article contains information on deploying DMARC Analyzer, including steps to identify domains, add them to the dashboard, generate and publish DMARC records, and analyze DMARC data for email authentication and security.

DMARC Analyzer provides a SaaS solution that enables you to manage complex DMARC deployment easily. To deploy DMARC Analyzer, follow these steps:

 Step 1 - Identifying Your Organization's Domains

To deploy DMARC, you must find your organization's owned domains. This means identifying all domains that have sent messages on behalf of your company. This includes both active and parked (inactive) domains.

 Step 2 - Adding Your Domains to Your Domains Dashboard

Once you have identified all domains, you must add them to your account. To do this:

1. Navigate to DNS Records | Add Domains
2. Enter active and parked (inactive) domains

 Step 3 - Generating a DMARC Record

The next step is to generate a DMARC record for your domains. To do this:

1. Navigate to DNS Records | DMARC Setup Wizard

This generates your DMARC record. See the https://www.mimecast.com/content/how-to-create-a-dmarc-record/ link for further information on creating a DMARC record.

 Step 4 - Publishing the Generated DMARC Record Into Your DNS

The next step in deploying DMARC is to publish the DMARC record into your DNS. You can complete this step or request your DNS provider to place the relevant DMARC record.

 Step 5 - Analyze Your DMARC Data

The DMARC reports are now in your account and available to view. These reports:

1. Provide a greater understanding of your mail streams.
2. Provide a strong insight into your email channel(s).
3. Help to ensure that your outbound mail sources are authenticating properly.
4. Show if ongoing attacks are happening on your domain(s).
5. Ensure that the various IPs sending emails (claiming to be from your domain) are legitimate. To check if they are legitimate, either:

• • Configure them with DKIM https://www.mimecast.com/products/dmarc-analyzer/dkim-check/
  • Add them to your SPF range https://www.mimecast.com/content/how-to-create-an-spf-txt-record/
  • Validate your DMARC record https://www.mimecast.com/products/dmarc-analyzer/dmarc-check/

It can take up to 72 hours for DMARC data to appear in your account.