The Email Insights Report is available for Valimail Enforce Enterprise users.



The Email Insights Report is a component of the Valimail RUF+ enhanced feature. It will help you to investigate DMARC failing emails, and establish why they are failing, thus providing the action point needed to fix them. 

This feature will be of great help to you during and after the domain onboarding process and will ensure that you can investigate and decide/take action on any failed email.



TABLE OF CONTENTS





How to access the Email Insights report in Valimail Enforce


You can reach the Email Insights Report by clicking on the Failure Insights section, located in the left side menu in Valimail Enforce.




You can filter on:

  • Recipient Domain
  • From Domain
  • Sending Service
  • Received Date (Previous day, 30, 60, 90)


The Email Insights report itself provides an overview of email failing to authenticate for ‘From Domains’ you own, giving you the ability to investigate why they are failing and fix them.






What type of information is shown in the Email Insights report of a given email?


Clicking on View Headers will bring you to the Authentication Header section, which provides more detailed information about the content and the email header.

The Authentication Result and the DKIM signature areas will show you if that email was SPF aligned and/or DKIM-signed for your domain.


Email Insights Report page







What is the Authentication Header section comprised of?


1. Authentication header


Message Info

  • From Domain
  • Sender
  • Message Count
  • Failure Date


Data Resources

  • View Raw Header (Modal window pops up with the information).
  • View Failed Email (Opens a modal with a Message-ID that can be used to search for the email in your M365 or Gmail instance. Admin credentials for M365/Gmail are required).



2. Return Path

3. Claimed Message Sender

4. Message Recipient

5. Hidden Header

Authentication Results

  • SPF
  • DKIM
  • DMARC

DKIM Signature





How to search for failing email

The details of an email can be retrieved in M365 or Google Workspace using the built in admin tools and the Message-ID email header.

Some restrictions exist:

  • You must be a M365/G Workspace Administrator
  • If the message is before a certain period (usually 7-15 days) then more detail besides the Message-ID may be needed
  • WorkspaceThe Google Workspace search tool doesn’t retrieve all of the message headers (subject, to and from are present)

Microsoft 365

  • Login to https://admin.exchange.microsoft.com/
  • Click Mail Flow -> Message Trace
  • Click “Start a Trace”
  • In the panel on your right, enter the Message-ID and hit Search
  • You should see the message in the results
  • Clicking on the message the console displays the general information.
  • Note that the M365 should have an M365 Defend subscription to be able to perform the Trace actions like “Go hunt for this Message” and “View message in Explorer”

Google Workspace

  • Log in as an administrator to the Google Workspace console and go to Reporting -> Email Log Search
  • Select Custom Search
  • Enter a time range and the Message ID
  • Hit Search
  • Click on the message to see the details





How can this help customers?


As stated at the beginning, The Email Insights report will help you to investigate DMARC failing emails, and establish why they are failing, thus providing the action point needed to fix them. 

This feature will be of great help to you during and after the domain onboarding process and will ensure that you can investigate and decide/take action on any failed email.





Does the Email Insights Report require any configuration?


To use the Email Insights Report, first, you will need to set up MSP Connection in Account Settings.


There are two requirements:



Important Note: The Email Insights Report feature is available exclusively to Enforce Enterprise tier accounts. If you do not have an Enterprise account, you can contact support or reach out directly to your Account Manager if you're interested in upgrading to Enterprise in order to leverage this feature.






As always, if you have any questions, please don't hesitate to submit a ticket.