When a network engineer is troubleshooting a mail flow issue, they discover that some emails are rejected with an SMTP code of 451 and the error message "#4.7.1 Unable to perform DMARC verification".

The correct answer is A. Accept. The SMTP 451 code indicates a temporary failure, meaning the DMARC verification could not be completed due to a transient DNS lookup error. In the DMARC Verification Profile on the Cisco Secure Email Gateway, there is a specific action setting for 'Temporary Failure.' Setting thi

Cisco ESA LDAP, Mail Policies, and Authentication

Question

When a network engineer is troubleshooting a mail flow issue, they discover that some emails are rejected with an SMTP code of 451 and the error message "#4.7.1 Unable to perform DMARC verification". In the DMARC verification profile on the Cisco Secure Email Gateway appliance, which action must be set for messages that result in temporary failure to prevent these emails from being rejected?

Options

AAccept
BIgnore
CQuarantine
DNo Action

How the community answered

(28 responses)

A
75% (21)
B
7% (2)
C
14% (4)
D
4% (1)

Explanation

The SMTP 451 code indicates a temporary failure, meaning the DMARC verification could not be completed due to a transient DNS lookup error. In the DMARC Verification Profile on the Cisco Secure Email Gateway, there is a specific action setting for 'Temporary Failure.' Setting this action to 'Accept' instructs the appliance to accept and deliver the message when DMARC verification temporarily fails, rather than issuing a 451 rejection. This prevents legitimate email from being blocked due to transient DNS issues. Setting it to 'Quarantine' (C) would still hold the message, 'No Action' (D) and 'Ignore' (B) have different behavioral implications and do not directly prevent the 451 rejection in all configurations.

Topics

#DMARC verification#Email authentication#Cisco Secure Email Gateway (ESA)#Troubleshooting mail flow

Community Discussion

No community discussion yet for this question.

Full 300-720 Practice