DMARC policy for ServiceNow

[nameisnani]

Hi Team , 

We are working on email integration to create incidents from received email. For the emails that we received at ServiceNow end, we are exploring the possibility of enforcing DMARC policy. Does anyone know if this is possible scenario? Or else as workaround if we want to differentiate between spam and authorized emails, what could be the unique parameters that can be sent with the incoming email in ServiceNow based on which we can configure email filters to identify spam emails?

Can anyone please help me with steps and screenshot for better understanding .

Thanks In Advance 

[Community Alums]

Hi @nameisnani ,
Please go through this KB: https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB0749811

[Its_Azar]

Hi there @nameisnani 

I believe ServiceNow itself doesn't directly enforce DMARC policies. Instead, it relies on the email service provider's DMARC policy enforcement.

To ensure that emails received by ServiceNow adhere to DMARC policies, you'll need to ensure that your organization's email infrastructure is configured properly to enforce DMARC policies. ]

As for differentiating between spam and authorized emails in ServiceNow, you can utilize various parameters sent with incoming emails to configure email filters. Some unique parameters you can leverage include:

Verify the sender's email address against a whitelist of authorized senders.
 Look for specific message headers such as SPF , DKIM  and DMARC authentication results to determine the authenticity of the email.
Implement rules based on keywords or patterns in the subject line that indicate the email's legitimacy.
 Analyze the content of the email for known spam patterns, malicious links, or attachments.

To configure email filters in ServiceNow based on these parameters, you'll typically use Business Rules or Email Notification Scripts. Here's a basic outline of the steps involved:

 Navigate to "System Policy" > "Email" > "Inbound Actions" in ServiceNow.
 Create a new inbound email action or modify an existing one to include conditions based on the parameters mentioned above.
Write scripts or conditions to evaluate incoming emails against these parameters and take appropriate actions such as creating incidents or marking emails as spam.

If this helps kindly accept the response thanks much.