ESA and DMARC

[mateormz]

Hi,

We have a Cisco ESA and I am in the process of implementing DMARC.  Ive have currently set DMARC to monitor only and enabled it on my relay policy.  Do I have to create a dns TXT record for mt Domain?

Thank you.

[UdupiKrishna · Accepted solution]

If the idea is to run DMARC verification, it should not be enabled on RELAYED mail flow policy since RELAY action is meant for outgoing emails (from your organisation). Verification is to be enforced on incoming emails.

You can publish DMARC record providing a way for receiving MTA(s) to authenticate and accept emails safely.

But for DMARC verification (incoming emails) it's not mandatory to publish your own domain's records.

[mateormz]

Thank you.