In this article, we’ll explore the various facets of EasyDMARC's “Domains and Groups” section, designed to provide users with a comprehensive overview of their domain management.
Domains
The “Domains and Groups” page is separated into subsections “Domains” and “Groups”.
Let's navigate through the key information in the “Domains” subsection of “Domains and Groups”, and see what each column represents:
1. Domain and pending actions: Users have the ability to conveniently access a comprehensive list of domains added to their EasyDMARC account. The EasyDMARC system will analyze the domain added to the profile and provide you with a list of pending actions. The count of the pending actions for each domain is presented next to it. We’ll walk through these pending actions in detail in the next section of the article.
2. Policy: Displays the implemented DMARC policy for each domain. Users can quickly determine whether their policy is set to "none," "quarantine," or "reject," indicating the level of protection applied to their email streams.
3. Volume: Track the volume of sent emails from the domains. The "Volume" tab utilizes data sourced directly from DMARC aggregate reports.
4. DMARC Compliance: In the "DMARC Compliance" tab, users see the percentage of emails meeting DMARC standards.
5. SPF Pass Rate: In the "SPF Pass Rate" tab, users can analyze the percentage of emails with successful SPF authentication and alignment.
6. DKIM Pass Rate: The "DKIM Pass Rate" tab allows users to assess the percentage of emails with successful DKIM authentication and alignment.
Note: Please note that you might see a "No Record" status for DKIM, even if you have correctly configured a DKIM record in your DNS. This can occur because our system relies on the data received from aggregate reports of your domain. Therefore, it's important to have DMARC aggregate reports in place to help ensure more accurate detection of DKIM selectors.
7. Domain Group: Users have the option to verify if their domain is included in any custom-created group. In case a domain is not assigned to a group, it will automatically be placed in the "Default" group, making it easier to organize and manage domains.
8. Labels: Labels enable users to categorize and identify domains for efficient management. They simplify domain organization, making it easy to differentiate domains based on purpose (e.g., marketing, transactional, internal communications) or ownership (specific clients or departments).
9. Type: This tab represents the domain type, whether it’s “sending”, which means that it’s an active domain used to send out emails, or “parked”, which means that this domain is not used for sending out emails. It’s worth noting that the “parked”/inactive domains are not charged.
These are the default columns presented for each domain. The columns can be customized using the “Customize columns” function, found in the upper right part of the page, when clicking on the three vertical dots(e.g., you can add a column that will show the domains’ BIMI record status):
The “Domains” subsection also provides the comprehensive filtering option, with which you can perform instant filtering or create and save quick filters:
Pending Actions
Now, let’s deep dive into the pending actions list that the EasyDMARC system will provide when a domain is added. You can navigate to the pending actions list for a domain by clicking on the red triangle sign next to the domain. Completing these actions will enhance your domain’s security.
Below is the list of pending actions for a domain when it’s newly added and nothing is set up for it, with the severity level of actions and explanation:
1. Verify Domain - Critical
The first thing required to be done when the domain is added to EasyDMARC is to verify it. The verification requires publishing a DMARC record, which would include EasyDMARC’s DMARC reporting addresses (RUA and RUF), so EasyDMARC can receive the domain’s DMARC reports and parse them for you.
When clicking the “verify” button, the system will provide you with two options for domain verification. First is the domain verification by activating the Managed DMARC solution.
This will require one-time DNS configuration by publishing a CNAME-type DMARC record, and you can benefit from it by being able to manage, adjust, and maintain the DMARC record directly from the EasyDMARC platform.
The second option is to publish a TXT-type DMARC record, which will include EasyDMARC’s RUA and RUF addresses. However, with this option, the DMARC record management should be done from the DNS zone directly.
For more comprehensive guidance on domain verification in EasyDMARC, you can refer to this article:
Initial steps for getting merged with EasyDMARC
2. Fix SPF record - Critical
The next critical pending action is to fix the SPF record, which is one of the main email security protocols. If the system has identified no SPF record for your domain or any issues with your existing SPF record, it will provide you with this pending action.
By clicking the “Fix SPF Record”, the system will provide you with the EasySPF record, which should be published in your DNS zone. Once done, EasySPF will be activated for your domain, along with the record being fixed. After this, you will be able to manage your domain’s SPF record directly from EasyDMARC. EasySPF will also provide you with additional visibility over the usage of your sending sources.
For more comprehensive guidance on EasySPF and its additional benefits, please refer to the following articles:
EasySPF - EasyDMARC's Dynamic SPF Flattening Solution
Setting Up EasySPF
Next to the “Fix SPF record” button, you can click on the “Lookup” icon, which will redirect you to the EasySPF checker tool. Here you will see the reason why your SPF record failed validation and why it needs to be fixed.
In case you’d prefer to set up the SPF record without activating EasySPF for the domain, you can check the following article:
How do I implement SPF for my domain?
In case any questions remain or you still receive any SPF validation failures, feel free to open a support ticket with EasyDMARC experts.
3. Fix DKIM record - Critical
DKIM is the next email security protocol that should be implemented, and the next pending action is regarding DKIM.
EasyDMARC has an in-house DKIM selectors’ database against which it performs the checks.
If the system has detected a DKIM record that has issues, it will provide you with this action.
By clicking the “Fix DKIM Record” button, a pop-up will appear, starting the process of the Managed DKIM solution.
To activate Managed DKIM, you will need to click the “View DKIM Selectors” button. You will then be redirected to the Managed DKIM page, where your DKIM selectors will be detected by the system. Double-check the selectors and adjust the list if needed. Once done, activate the Managed DKIM solution by publishing the NS-type record provided by the system.
After that, you’ll be able to manage all your DKIM records from inside your EasyDMARC account.
For more comprehensive guidance on how to activate the Managed DKIM solution for your domain, please refer to this article:
Managed DKIM
You also have the lookup button next to the “Fix DKIM Record” button, which will redirect you to the DKIM checker tool. Here you will be able to check for your DKIM records and see why they fail the validation.
In case you prefer moving forward with fixing the DKIM issues without activating the Managed DKIM solution, you can check for the DKIM configuration steps of your sending sources in the EasyDMARC knowledge base by searching for the sending source that you’re using.
In case any questions remain or you still receive any DKIM validation failures, feel free to open a support ticket with EasyDMARC experts.
4. Fix DMARC record - Critical
If you have completed the “Verify Domain” action properly, then this action will not show up for your domain. However, if you verified the domain in the first step but still see the “Fix DMARC record” pending action, check the record by performing a DMARC lookup to see if there are any issues with the record:
The lookup tool will show exactly if there are any issues with your DMARC record so you can move forward with fixing it.
In case you have any questions, feel free to open a support ticket with EasyDMARC experts.
5. Add domain to Reputation Monitoring - Warning / Optional
By completing this pending action, you will add the domain to EasyDMARC’s Reputation Monitoring tool. Once the domain is added to Reputation Monitoring, the EasyDMARC system will automatically check and alert you if your domain appears on any blacklist.
Note: To delist a domain, you’ll need to contact the blacklist provider directly via the provided link.
You can skip this action by clicking the “x” button next to the “Add To Reputation Monitoring” button if you want to.
6. Activate EasySPF - Warning / Optional
In case you have activated EasySPF when fixing the SPF record, then this action will not appear on your dashboard. However, if the EasySPF was not activated when fixing the SPF record, you can activate it by clicking the “Activate” button.
The system will provide you with a TXT-type SPF record to add to your DNS zone and activate the EasySPF solution for the domain. However, make sure to navigate to EasySPF and double-check your sending sources detected by the system. If any sending sources are missing, add them manually and then activate EasySPF to avoid SPF failures when sending out emails.
You can refer to the following article for details on how to activate EasySPF:
Setting up EasySPF
You can skip this action by clicking the “x” button next to the “Activate” button if you want to.
7. Activate Managed DMARC - Warning / Optional
In case you have activated Managed DMARC when verifying the domain or fixing the DMARC record, then this action will not appear on your dashboard. However, if the Managed DMARC was not activated, you can activate it by clicking the “Activate” button.
You can refer to the following article for more details on how to activate Managed DMARC for your domain:
Activate Managed DMARC
You can skip this action by clicking the “x” button next to the “Activate” button if you want to.
8. Activate Managed DKIM - Warning / Optional
In case you have activated Managed DKIM when fixing the DKIM record, then this action will not appear on your dashboard. However, if the Managed DKIM was not activated, you can activate it by clicking the “Activate” button.
You can refer to the following article for more details on how to activate Managed DKIM for your domain:
You can skip this action by clicking the “x” button next to the “Activate” button if you want to.
9. Activate Managed MTA-STS - Warning / Optional
If you have configured MTA-STS for your domain, you can consider activating the Managed MTA-STS solution, which will allow you to manage your MTA-STS settings from inside your EasyDMARC account as well, and you’ll be able to receive the TLS reports to the EasyDMARC dashboard and analyze them here.
On the other hand, if you don’t even have MTA-STS configured, you can set up MTA-STS and TLS reporting from scratch by activating the Manafed MTA-STS solution for your domain.
You can refer to the following article for more details on how to activate Managed MTA-STS for your domain:
Activating Managed MTA-STS
Note: MTA-STS is not yet broadly adopted by the majority of domains and is mostly implemented by banking and governmental domains. It applies to incoming mail and ensures that messages are only accepted over secure TLS connections.
You can skip this action by clicking the “x” button next to the “Activate” button if you want to.
Overview and Management
Besides the “Pending actions”, there are also two additional subsections in this page, which are the “Overview” and the “Management” sections:
Under the “Overview”, you will see a more detailed view per domain, which will include:
1. DMARC compliance rate, along with DKIM and SPF pass rates
2. The domain’s email volume distribution by compliance
3. The domain scanner results of the domain
4. The DNS record statuses (DMARC, SPF and DKIM)
5. Option to get redirected to the Aggregate reports’ section of the domain, and the button to get redirected to the domain scanner
The “Management” tab represents such details as:
1. The domain type - sending or parked
2. The domain group
3. The domain’s label
4. The users who have access to that domain and the option to manage access
5. The alerts that are set up for that domain, with an option to add alerts
6. The EasyDMARC solutions and features that were activated for the domain or are yet to be activated
Groups
The next general section of the “Domains and Groups” page is the “Groups”:
EasyDMARC allows users to group their domains, offering various organizational benefits, such as:
- Isolating Inactive Domains: Users can independently group their inactive domains from active ones, streamlining management and analysis.
- Organizational Departments: For organizations with multiple departments, each managing distinct domains, grouping provides a structured overview for efficient administration.
- MSP Management: Managed Service Providers (MSPs) handling multiple groups can easily organize and monitor domains under their management.
In the Groups section, you will see the following tabs for each group:
1. The Group name
2. The domain count
3. DMARC enforcement details of the domains in the group
4. Total volume of emails sent out from the domains in the group
5. DMARC compliance rate of the group overall
6. The date when the group was created
You will also have the following features in the “Groups” section:
1. Search option
2. Time customization table
3. “Create Group” button
4. Option to add new domains
5. Export the information from the Groups section in PDF format
In case any questions arise, feel free to contact EasyDMARC technical support.