MSSP
DMARC
Why do businesses need DMARC?
Today, within a couple of minutes anyone can “spoof” your domain and send out an email pretending to be from you. This could be a
- Phishing email, designed to extract the persons credentials
- Malicious email trying to infect the target system with malware
- Mail offering a spurious job or business opportunity
- Mail with language or content that would affect your reputation/brand
Since these mails do not pass through your network (they originate from, and are delivered to a recipient outside your network), they are impossible to stop using any controls on your system. To keep your brands and customers safe from these kind of mails, the issue has to be addressed at the service provider level using DMARC (Domain-based Message Authentication, Reporting, and Conformance), which is a combination of SPF (Sender Policy Framework) and DKIM (Domain Keys Identifed Mail)
HOW DMARC WORKS
- There is no hardware or software needed to be installed at your end. By publishing your DMARC record, you can tell service providers which servers are authorized to send emails on your behalf. Other mails can be rejected or quarantined as per your preference (SPF)
- Emails can be signed before transmission. The receiving domain attempts to validate the signature using DNS lookups and only accepts validated mails (DKIM).
- DMARC Checks the alignment of the email ie the “from” domain must match either of the domains used in DKIM or SPF. Only emails that are aligned can pass DMARC.
- Spoofed mails will thus fail DMARC and they can be reported/quarantined or blocked as per your preference.
Softcell DMARC deployment process
- Softcell has a cross-functional team of experts on DNS, Email, 3rd party mail service providers who work with your transaction, applications and business teams (marketing, operations etc) to ensure smooth deployment of DMARC.
- Softcell systematically walks you through the process of reporting, quarantining and finally blocking spurious emails, hence reducing the risk of inadvertently blocking legitimate email.
- Softcell has email authentication technical expertise to trouble shoot authentication issues across all mail channels.
Benefits of DMARC
- Eliminate phishing attacks spoofing your brand.
- Trusted delivery of transaction and marketing emails.
- Avoid email fraud and related costs.
- Improved deliverability at Gmail, Outlook and other receivers.
- Protect against highly targeted low and slow attacks.
Softcell DMARC offering highlights
- Provides 360° visibility and governance across all email channels.
- Market leading product for DMARC deployment.
- Works with GMAIL, Yahoo, Outlook and over 3B+ mailboxes globally.
- Proven product with scalable architecture and lowest cost of ownership.
- Local support and fully managed service from email authentication experts.
- Mitigate Risk of inadvertent blocking of legitimate email.
- Analysis of all DMARC report emails to alert you on domains/IP addresses spoofing your organization domain.
DMARC architecture
For more information, please contact [email protected]