Page 103 - CSEW
P. 103

Block fraudulent senders

      DMARC, DKIM and SPF










                                                            Cisco Email Security

                                                                                                              Delete
        TrustedPartner.com  Signed





                                                     SPF                              DMARC
                                                 Checks if mail from a
        TrustedPartner.com  Fraudulent         domain is being sent from          Ties SPF and DKIM results   Send
                                                                                    to 'From' header
                                                 an authorized host   DNS                                                    Verified



                                                                     DKIM
                                                                 Matches public key to
                                                               sender domain’s private key
                                                                    records                                 Quarantine

                                                                                                             Block invalid senders
      Determine whether a                              Inspect sender details on                             and identify next steps

        sender is reputable                                inbound messages
                                                                                                                        work
      © 2016 Engage ESM All Rights Reserved                                                                                            112
   98   99   100   101   102   103   104   105   106   107   108