SPF Management

SPF Management is included as part of the DMARC add-on.

SPF records ensure emails are sent from an authorized server by comparing the sender's IP address with the domain's DNS records.

Benefits

  • Overcome SPF limitations with simplified management.

  • Configure SPF settings directly in your Email Security Administrator Portal.

  • Seamlessly integrate with the DMARC solution for ongoing monitoring and issue resolution.

High-Level Procedure

  1. Add the authorized sending sources through the Email Security Administrator Portal. See Manually Adding New Source to SPF Records.

  2. Activate SPF Management by updating the DNS SPF record with the required include statement. See Activating SPF Management.

  3. Check Point manages authorized sending sources for each domain.

  4. Modify sending sources as needed through the Email Security Administrator Portal. See Managing Sending Sources.

  5. Check Point ensures seamless operation beyond SPF limitations.

Reviewing the SPF Status of your Domains

The SPF Management page shows a list of all the organization's protected domains and sub-domains.

To view the SPF Management page, access the Email Security Administrator Portal and click DMARC > SPF Management.

Column Description

Domain

Domain name.

SPF Monitoring

Monitoring status of the domain.

  • Managed - Check Point manages your SPF.

  • Pending - The Check Point SPF is not yet active. To activate it, update your domain's SPF record in your DNS to include Check Point's SPF entry.

    Note:

    DNS records may take some time to propagate across the internet.

  • Not Managed - The Check Point does not host your domain's SPF record yet, but the necessary settings are configured and ready for deployment.

  • Not Available - SPF management is unavailable for onmicrosoft.com sub-domains, as Microsoft controls these DNS settings centrally to ensure consistency and security. For full DNS and email authentication control, use a custom domain.

SPF% Success

The percentage of emails that pass SPF out of the total number of reported emails sent by the domain.

Managed sources

Number of managed sources in the domain.

Last Updated

The date and time of the last update.

Hosted Domain

Name of the hosted domain.

Activating SPF Management

Email Security uses the SPF Macro Mechanism, which allows an unlimited number of SPF entries to be defined.

To activate the SPF Management for Email Security, edit your organizational domain's DNS SPF record to include this statement:

include:{code}.spf.checkpoint-spf.com

or replace it entirely with this SPF record:

v=spf1 include:{code}.spf.checkpoint-spf.com ~all

where {code} is the unique code specific to your organization. You can find the code from the Instructions widget.

Once the new SPF record is active in your DNS, Email Security verifies it and activates SPF Management.

Note:

If you use Microsoft deployments as part of DMARC onboarding, the SPF entry for Outlook will be included along with the Check Point SPF reference. For example, v=spf1 include:abcd12345.spf.checkpoint-spf.com include:spf.protection.outlook.com -all