DMARC Analyzer 2.0 - Domain Management

This article contains information on the features and functionalities of the Domain Management page in Mimecast DMARC Analyzer, including domain monitoring, email authentication configuration, DNS delegation, and tools for organizing and managing domains.

Overview

The Domain Management in Mimecast DMARC Analyzer provides a centralized interface for managing and monitoring email domains. It enables users to:

• View and organize all domains and their statuses, including grouping domains for easier management.
• Add new domains, review domains pending approval, and ensure only authorized domains are integrated.
• Track key authentication configurations such as DMARC, SPF, and DKIM, and monitor DNS delegation status.
• Use search, filter, and bulk actions to efficiently manage large domain lists.
• Quickly identify and resolve configuration issues to maintain compliance with email security best practices.

Dashboard Overview

Overview and Domain Group Tabs

• The Overview tab provides a summary of all domains and their statuses.
• The Domain Groups tab allows users to organize domains into groups for easier management.

Add Domain and Pending Approval

• Add Domain: Use this button to add new domains to the platform for monitoring and configuration.

• Domains Pending Approval: This is a holding area for domains that meet specific criteria but have not yet been explicitly accepted or added to a customer account. If a domain has an existing DMARC record and is actively sending data to the customer account, but the domain itself has not been formally accepted or added, it will be placed in this pending state.

  This mechanism serves as a safeguard to prevent potentially incorrect or unauthorized data from entering the customer's environment. Only after a domain is explicitly accepted and added to the account, or if it is a subdomain of an already accepted domain, will its data be fully integrated and processed. Until then, the domain remains parked in the Pending Approval section, ensuring that only trusted and verified domains contribute data to the customer’s environment.

Domain Summary Cards

• All Domains: Displays the total number of domains added to the platform, along with a breakdown of domains that are not set up or pending configuration.
• Delegated Domains: Shows the number of domains with DNS delegation enabled, including those that are inactive or pending delegation.

Domains Table

The table provides a detailed view of all domains and their current statuses. Key columns include:

• Domain: The name of the domain being monitored.
• Activity: Indicates whether the domain is actively receiving data.
• Status: Displays the monitoring status of the domain (e.g., "Active Monitoring").
• DNS Delegation: Shows whether DNS delegation is active, inactive, or pending.
• DMARC: Indicates the DMARC policy status (e.g., "Not setup," "p=quarantine").
• DKIM: Displays whether DKIM is active and delegated.
• SPF: Shows the SPF configuration status (e.g., "Not setup").
• Actions Menu: Access additional options for managing each domain by clicking the ellipsis (...) icon.

Search and Filter Options

• Use the Search for Domain field to quickly locate a specific domain.
• The Groups dropdown allows filtering domains by their assigned groups.
• The Filter button provides advanced filtering options to refine the domain list based on specific criteria.

Configuration: Adding Domains

To access the DMARC Analyzer Domain management dashboard and add new domains, follow these simple steps below:

1. Log in to the Mimecast Administrator Console
2. On your left, navigate to More Services | DMARC Analyzer 2.0 | Domain Management
3. On the DMARC Analyzer dashboard, click Add Domain.

4. Add one or more domains to your account (use one domain per line), then click Next.

5. Choose how you will configure DMARC from the following options:

• DMARC Delegation (Automated)
• DNS TXT Record (Manual)

Policy Mode	None: Primarily used for monitoring purposes. You will receive reports about email communication results. This is useful for gathering data and understanding how emails are being processed without impacting legitimate email flow. Quarantine: Emails failing DMARC checks should be treated with suspicion and may be placed in the recipient's spam and junk folder. Reject: This policy instructs receiving mail servers to reject emails that fail DMARC checks outright, preventing them from being delivered to the recipient's inbox.
Advanced Option
Subdomain Policy	This policy should be applied to email from a sub-domain of this domain that fails the DMARC check. Using this tag, domain owners can publish a 'wildcard' policy for all subdomains. You can select an applicable policy: None Quarantine Reject
Report Notifications	Reporting emails are pre-populated from dmarcanalyzer.com by default. They can be changed if needed or additional ones can be added. Additional emails cannot be guaranteed to be notified.
Alignment Mode	Relaxed mode also authenticated SPF domains and DKIM signing domains (d=) that share an organizational domain with an email. From the domain will pass the DMARC check. In strict mode an exact match is required. DKIM Alignment Relaxed (default) Strict SPF Alignment Relaxed (default) Strict
Forensic Options (Optional)	Select one or more applicable options for reporting: Report failures if all alignment and authentication fail. Report failures if DKIM or SPF does not align and authentication fails Report failures if DKIM fails Report failures if SPF fails

• Skip DMARC setup

6. Once you chosen the one of the options to configure DMARC, you click Next

7. Once your record has been created, click Finish
8. You can see your added domain in Domain Management's domain list.