IronPort - advanced configuration guide

Chapter 5 Email Authentication
Configuring an Action for DKIM Verified Mail
OL-25137-01
When you verify DKIM mail, an Authentication-Results header is added to the mail, but the mail is
accepted regardless of the authentication result. To configure actions based on these authentication
results, you can create a content filter to perform actions on the DKIM-verified mail. For example, if
DKIM verification fails, you may want configure the mail to be delivered, bounced, dropped, or sent to
a quarantine. To do this, you must configure an action using a content filter.
To add an action from the GUI, complete the following steps:
Step 1 From Mail Policies > Incoming Filters, click Add Filter
Step 2 In the Conditions section, click Add Condition
Step 3 Select DKIM Authentication.
Figure 5-16 DKIM Authentication Content Filter Condition
Step 4 Choose a DKIM condition. Select one of the following options:
Pass. The messaged passed the authentication tests.
Neutral. The message was not signed.
Temperror. A recoverable error occurred.
Permerror. An unrecoverable error occurred.
Hardfail. The authentication tests failed.
None. Authentication was not performed.
Step 5 Select an action to associate with the condition. For example, if the DKIM verification fails, you may
want to notify the recipient and bounce the message. Or, if DKIM verification passes, you may want to
deliver the message immediately without further processing.
Step 6 Submit the new content filter.
Step 7 Enable the content filter on the appropriate incoming mail policy.
Step 8 Commit your changes.
Cisco IronPort AsyncOS 7.6 for Email Advanced Configuration Guide
5-21