Policies are configured to honor sending domains DMARC.

Why This Matters

When email security policies fail to honor a sending domain's DMARC policy, attackers can more easily spoof legitimate domains for phishing. Honoring DMARC ensures that messages failing authentication checks are handled according to the domain owner's instructions (quarantine or reject), reducing the risk of spoofed emails reaching users. This setting strengthens your overall email authentication posture.

What Aether365 Checks

Aether365 verifies that your Microsoft 365 anti-phishing and anti-spam policies are configured to honor the sending domain's DMARC policy (p=quarantine, p=reject, or p=none). This check appears in the Aether365 dashboard under Microsoft 365 security checks.

How to Fix

To honor sending domain DMARC policies across your organization: