When an external party has a Dmarc record set to p = none ( states hey you don't need to act on it ) .... that mails comes in on our cisco esa's.. Its the external parties choice to tell us what we will need to do with mails that fails on Dmarc...
If there is no dmarc record specified ,I understand we can't act on that one ( besides acting on spf or dkim checks )
But..... we as a financial institute don't want such mails anyway where dmarc fails and p=none. I don't see an option to act on that on the cisco esa's ( there are only actions for reject/quarantine/Perm-temp errors)
I also checked the X-Ironport-Dmarc-Check-Result header, but that is just for use when verification fails
So is there a way on cisco esa's to act on p=none mails ???