Skip to content

Page permalink

Always use the following permalink when referencing this page. It will remain unchanged in future help versions.

https://docs.sophos.com/central/customer/help/en-us/index.html?contextId=email-dmarc-manager-configure

Configure DMARC Reporting

You can configure DMARC Reporting individually for each domain. The DMARC Reporting column appears in the domain list under Gateway Domain Settings/Status or M365 Mailflow Domain Settings/Status. This column includes a status link that you can click to begin setup.

Note

Setting up DMARC Reporting for the first time might take longer while the system completes the initial setup.

To configure DMARC Reporting, do the following:

  1. In Sophos Central, go to My Products > General Settings.
  2. Select either Gateway Domain Settings/Status or M365 Mailflow Domain Settings/Status.
  3. In DMARC Reporting, click the Not verified status link for the domain you want to configure.

  4. If prompted, read the text in DMARC reporting setup, then click Proceed.

    The DMARC Manager portal appears.

  5. In the DMARC tab, click View Setup Instructions.

  6. Copy the CNAME record shown and add it to your domain's DNS settings.

    Note

    You can add a TXT record to your domain's DNS, but it won't update automatically. If you change your DMARC configuration later, you must manually update the TXT record in your DNS.

    We recommend using a CNAME record because it updates automatically and doesn't require DNS changes when your DMARC configuration is updated.

  7. After updating your DNS, click Verify to confirm the DMARC configuration.

  8. (Optional) To further strengthen your domain’s security, complete any remaining configurations.

    Tip

    If you're setting up other DNS configurations such as SPF, DKIM, BIMI, TLS-RPT, or MTA-STS, click View Setup Instructions and follow the steps provided. For help, see Domain configuration.

  9. When you've completed your configurations, click Save & Back.

If the configuration is successful, the domain's status changes to Reporting.

When the domain is verified, you can access the DMARC Manager summary and advanced view.

You can turn DMARC Reporting on or off, even if the domain is disconnected.