The Email Insights report is available for Valimail Enforce Enterprise users.
The Email Insights report is a component of the Valimail RUF+ enhanced feature. It will help you to investigate DMARC failing emails, and establish why they are failing, thus providing the action point needed to fix them.
This feature will be of great help to you during and after the domain onboarding process and will ensure that you can investigate and decide/take action on any failed email.
How to access the Email Insights report in Valimail Enforce
You can reach the Email Insights report by clicking on the Reports section, located in the left side menu in Valimail Enforce.
You can filter on:
Recipient Domain
From Domain
Sending Service
Received Date (Previous day, 30, 60, 90)
The Email Insights report itself provides an overview of email failing to authenticate for ‘From Domains’ you own, giving you the ability to investigate why they are failing and fix them.
What type of information is shown in the Email Insights report of a given email?
Clicking on View Headers will bring you to the Authentication Header section, which provides more detailed information about the content and the email header.
The Authentication Result and the DKIM signature areas will show you if that email was SPF aligned and/or DKIM-signed for your domain.
What is the Authentication Header section comprised of?
1. Authentication header
Message Info
From Domain
Sender
Message Count
Failure Date
Data Resources
View Raw Header (Modal window pops up with the information).
View Failed Email (Opens a modal with a Message-ID that can be used to search for the email in your M365 or Gmail instance. Admin credentials for M365/Gmail are required).
2. Return Path
3. Claimed Message Sender
4. Message Recipient
5. Hidden Header
Authentication Results
SPF
DKIM
DMARC
DKIM Signature
How to search for failing email
The details of an email can be retrieved in M365 or Google Workspace using the built in admin tools and the Message-ID email header.
Some restrictions exist:
You must be a M365/G Workspace Administrator
If the message is before a certain period (usually 7-15 days) then more detail besides the Message-ID may be needed
WorkspaceThe Google Workspace search tool doesn’t retrieve all of the message headers (subject, to and from are present)
Microsoft 365
Click Mail Flow -> Message Trace
Click “Start a Trace”
In the panel on your right, enter the Message-ID and hit Search
You should see the message in the results
Clicking on the message the console displays the general information.
Note that the M365 should have an M365 Defend subscription to be able to perform the Trace actions like “Go hunt for this Message” and “View message in Explorer”
Google Workspace
Log in as an administrator to the Google Workspace console and go to Reporting -> Email Log Search
Select Custom Search
Enter a time range and the Message ID
Hit Search
Click on the message to see the details
How can this help customers?
As stated at the beginning, The Email Insights report will help you to investigate DMARC failing emails, and establish why they are failing, thus providing the action point needed to fix them.
This feature will be of great help to you during and after the domain onboarding process and will ensure that you can investigate and decide/take action on any failed email.