DMARC and Office 365 –
Yes, You Must!

By Shehzad Mirza

Over the past few webinar presentations about the GCA DMARC Setup Guide, there were quite a few questions about DMARC and Office 365.  One of which was, “Do we need DMARC since Office 365 already uses it?”  The answer is YES!!!  A DMARC policy still needs to be implemented if you use Office 365.  Office 365 only protects for incoming messages with DMARC.  Below is a video in which we describe how to implement SPF, DKIM and DMARC using Office 365.

Additional resources:

• Information on how to setup SPF, DKIM and DMARC:
  • SPF – https://technet.microsoft.com/en-us/library/dn789058(v=exchg.150).aspx
  • DKIM – https://technet.microsoft.com/en-us/library/mt695945(v=exchg.150).aspx
  • DMARC – https://technet.microsoft.com/en-us/library/mt734386(v=exchg.150).aspx

• If the DKIM enable option is not present in Office 365, follow these instructions:
  • http://www.wave16.com/2016/03/office-365-dkim-no-dkim-keys-saved-for.html
  • Connect to Exchange Online PowerShell – https://technet.microsoft.com/en-us/library/jj984289(v=exchg.160).aspx

If you have any questions or comments, please feel free to contact us at [email protected].

The author, Shehzad Mirza, is the Director of Operations at the Global Cyber Alliance. You can connect with Shehzad on LinkedIn.