Email Security Blog

DMARC is Transformational

Danielle Tristao July 3, 2014 DMARC
Fallback Featured Image

The Benefits of Monitor Mode

When a technology exists that can tell you if and when your domains are being spoofed (and by who), why would you not use it?! DMARC monitoring is the solution.

Don't stick your head in the sand! Know what is going on in your email channel.
Don’t stick your head in the sand! Know what is going on in your email channel.

What is DMARC?

DMARC was created to address some fundamental problems with existing email authentication technologies (SPF and DKIM). It provides feedback about your email authentication implementation and gives ISPs (Google, Yahoo!, Microsoft, AOL, etc.) and recipients guidance about what to do with email that is not authenticated. If email authentication is set up correctly on your servers you can tell recipients to automatically reject all unauthenticated email using a DMARC Reject policy.

DMARC Monitor Policy (Monitor Mode)

Even if you don’t configure email authentication for outbound email, you can set up DMARC with a Monitor policy for your domains and get visibility into your email ecosystem that you never had before.

DMARC monitor mode gives you huge value almost immediately by simply adding a text record in DNS for each of your domains. That’s it! No software to install.

Example DMARC record: v=DMARC1; p=none; fo=1; rua=mailto:d@rua.agari.com; ruf=mailto:d@ruf.agari.com

Once DMARC records are in place, the feedback that you automatically get in Agari PRO after just a couple of days will provide you with information about every server that sends email from your domains. This includes information (IP address, geographic location, etc.) about your own servers (even the ones you don’t know about), about the ever growing number of web services (SalesForce, Marketo ,etc.) that you send email from and about criminals who are spoofing your domains to send spam, malware and phishing email with malicious intent.

DMARC Monitor Mode shows who is spoofing your domains and how much.
DMARC Monitor Mode shows who is spoofing your domains and how much.
DMARC Monitor Mode uncovers trends in your email ecosystem.
DMARC Monitor Mode uncovers trends in your email ecosystem.

From Information Comes Action!

With this new information, you can:

  • determine the effectiveness of your email authentication implementation on your servers (“oh, this is why we did this!”) or determine that you need it (“we’re being spoofed!”)

  • help your web services partners set up email authentication to allow them to send email on your behalf

  • provide details to Takedown Vendors who can go after those malicious criminals and stop them from putting your brand, your customers and your company at risk.

Who Should Use DMARC?

Everyone. No matter how large or small your company is, no matter how much email your company sends, you could become the victim of domain spoofing and risk your business and others. Leverage the work that Agari, Google, Yahoo!, Microsoft, AOL, Comcast, etc. has done to provide you with the visibility that DMARC Monitor Mode gives you to protect yourself and make the internet a safer place for everyone.

Leave a Reply

Your email will not be published. All fields are required.

Agari Blog Image

April 17, 2019 Fareed Bukhari

The Time is Now: Underscoring the Importance of DMARC for State and Local Governments

Scammers know that impersonating a trusted government agency is an extremely effective way to trick…

Agari Blog Image

February 26, 2019 Armen Najarian

Retail Trails Other Sectors in Adopting DMARC for Phishing Prevention

Recent research by the Agari Cyber Intelligence Division finds that the retail industry is dead…

Person Looking at DMARC Protected Email

February 19, 2019 Fareed Bukhari

DMARC Adoption Up, But 85% of Fortune 500 Remains Vulnerable to Brand Hijacking

Adoption of Domain-based Message Authentication, Reporting, and Conformance (DMARC) has seen modest growth in recent…

Agari Blog Image

October 16, 2018 Fareed Bukhari

One Year Later: Federal Mandate for Email Authentication Huge Success

Responding to BOD 18-01, agencies rally to complete the fastest sector-wide adoption of DMARC One…

Agari Blog Image

October 16, 2018 Patrick Peterson

DMARC: A 12-Month Triumph for DHS—and the Nation

Today is the deadline set by the Department of Homeland Security for all executive branch…

mobile image