How to Set Up/Modify SPF for Forcepoint-Websense
To implement SPF authentication for your domain, you will need to log in to your Forcepoint account to verify your domain and copy your TXT records. Forcepoint utilizes an include mechanism during the set-up process. For example, if you do not have an SPF record on your domain, the following scenario is the most common and would pass SPF:
v=spf1 include:mailcontrol.com ~all
If you do already have an SPF record on your domain, simply add the following to it:
include:mailcontrol.com
To create an SPF record for your domain name, follow these steps:
1. Log in to control panel for your domain DNS host
2. Select My Account menu and choose Domains
3. Expand Domains and click Manage DNS button for domain you want to verify
4. Scroll to Records section and click Add button to add DNS record
5. Select TXT from Type dropdown menu
6. In Host field, specify @
7. In TXT Value field, create a TXT record with the following specifications:
v=spf1 include:mailcontrol.com ~all
8. Decide how you want to enforce SPF failures:
~all results in a soft fail (not authorized, but not explicitly unauthorized)
-all results in a hard fail (unauthorized)
?all is neutral (similar to no policy)
As shown above, enter your choice after v=spf1 include:mailcontrol.com
9. Click Save
How to Set Up/Modify DKIM for Forcepoint-Websense
You can enable DKIM for your domain from Forcepoint’s control panel after creating the required TXT record in your domain’s DNS manager. The DKIM configuration has three major steps:
1. Generate unique public DKIM Key value using default selector in Forcepoint
2. Create TXT record in your domain’s DNS Manager (domain register/DNS provider)
3. Validate selector and enable DKIM in Forcepoint
To complete the first step, follow these instructions:
1. Log in to control panel for Forcepoint using Administrator credentials
2. Click Add in DKIM Signing Keys section to open Add Signing Key page
3. Enter name for your key in Key name field
4. Select one of following options for creating your key:
- Generate key (default) to create private key (only 1024bit supported)
- Private key to enter a key you already created (paste into entry box)
5. Click OK
As a user of this outbound email provider, Forcepoint-Websense customers are afforded DKIM signing because it supports that mechanism. By utilizing Forcepoint’s self-service portal, you can manually set up DKIM at your convenience via TXT records mentioned above. Overall, this Forcepoint product provides beneficial components (e.g., DKIM signing, self-service set up with TXT records) that result in a streamlined process.