When it comes to DMARC, it might seem quick and easy to cover just the basics for a basic price. But, you won’t get far on your journey to full protection if your provider doesn’t offer much beyond reporting. Here we provide the type of features, design, and extras that will fast-track your DMARC journey.

Reporting and dashboards 

Informative dashboards that help you see all the email validations taking place within your domain, allow you to easily identify misconfigurations, and see the scale and frequency of spoofing attacks. 

SPF and DKIM configuration

After report analysis, configure SPF and DKIM policies to ensure that your organization’s identity can only be used by legitimate users. This process should help you to confidently move through the various stages of DMARC implementation until your organization reaches the p=reject policy. 

Ongoing protection and support

As your organization grows, you will undoubtedly have to update your DMARC configuration to ensure that your domain continues to be protected and that deliverability is unaffected. A good DMARC product will allow you to easily update and maintain your SPF and DKIM configurations, as well as provide clear alerts if or when one of these breaks.

Brand Indicators for Message Identification (BIMI) 

Deploy BIMI to display your verified logo in the avatar slots of DMARC-authenticated emails to boost brand trust and improve open rates.

An SPF solution that allows you to overcome the 10 SPF lookup limit 

The SPF protocol is limited to 10 lookups. This is often an issue for organizations that use a number of cloud services since they will quickly reach this limit. Once this limit has been reached, legitimate emails may fail SPF authentication. Look for a tool that allows you to safely overcome this 10 SPF lookup limit.

You also want to make sure that your DMARC provider’s SPF solution isn’t macro-based. This is because macros aren’t supported by many legacy email infrastructures, causing huge email deliverability issues. Ensure your provider understands macros but does not rely on them.

Manage your DMARC, SPF, DKIM, BIMI, and MTA-STS records from within the tool

Edit, make changes to, and host records from inside your user interface without having to go into your DNS providing you with autonomy and flexibility.

Easily identify sources failing authentication with forensic reporting

Clear forensic reports for emails that have failed DMARC validation give you comprehensive and useful insight into the individual emails themselves. Be sure to double-check that a provider does this after they’ve redacted the body of the email. 

Immediately check your email configuration

Typically when you make a DNS change, you have to wait for the first aggregate reports to arrive in order to see the impact of the change, this can take up to 24 hours. Some DMARC vendors offer tools that allow you to check the results of changes to your configuration of your SPF, DKIM, FCrDNS, and TLS immediately. 

API Access 

Seamless integration of data from your DMARC solution with your existing security dashboards creates a one-stop shop for all email security analysis. 

Single-Sign-On (SSO)

This allows your organization to integrate DMARC  with other key IT systems, such as Okta so that it can be accessed with a single sign-on to an organization’s security setup. 

Implementation 

An implementation package can help your organization put DMARC protection in place more quickly, minimizing your exposure to exact domain impersonation. The services included should enable you to identify valid sources of email within your organization, configure them correctly, and then put DMARC into quarantine or reject.

Managed Services 

The benefit of having a managed service is that you have access to a team of experts who are available at all times. These experts can notify you of incident alerts and suggest resolutions, freeing your team up to focus on other tasks.

Customer support 

This is a great resource to have for tackling any ad hoc troubleshooting or getting help using your DMARC tool. OnDMARC incorporates chat functions into its DMARC portal, so with a single click of a button, you can be connected to an engineer ready to help solve your query.