Mail going to Spam Folder due to SPF Fail

[sv7]

Hello All,

Deployed an Cloud Email Security in my premises where incoming mails goes via ESA and then delivered to my Microsoft Mx. Here im facing an issue where  my mail goes to Spam folder due to SPF fail. Attaching an Error snapshot for better clarity

[Octavian Szolga]

Hi,

Based on your printscreen, you've sent an email from your domain to gmail but used ESA (maybe?) to deliver that email. So not inbound to your organization but outbound. 

Gmail rejected the email because your domain has the following SPF (DNS TXT record) "v=spf1 include:spf.protection.outlook.com -all"

So actually, you're authorizing whatever SPF Microsoft has for its O365 service, but not the source IP from your printscreen which presumably is ESA.

BR,

Octavian

[sv7]

Hi Octavian,

What could be the possible solution for this ?

[Ken Stieers]

Add the external IP of your ESA to your spf record.

Or setup DKIM signing on your ESA and add the DKIM record to your DNS

Ideally, you should do both.