Commercial Integrator August 2022 - 15

solution in place to protect your inbound
emails, you can add outbound fi ltering
for extra layers of protection. Should one
of your email accounts become compromised,
having outbound fi ltering in
place will increase the chances that any
attempts to abuse the account for malicious
purposes will be caught and quarantined.
Outbound fi ltering can also be used to
enforce Data Loss Prevention (DLP) policy,
including preventing inclusion of protected
client data in emails.
If you implement outbound fi ltering, it's
best, when possible, to go " all in. " This
allows you to exclude your actual mail
server IP addresses from your Sender Policy
Framework (SPF) record. Should an email
account be compromised by an attacker
who is suffi ciently sophisticated to circumvent
your outbound fi ltering, the message
will fail SPF verifi cation. If your messages
are DKIM signed by your mail server, rather
than your outbound fi lter, the message
may still appear as authentic. Although
this might not be a silver bullet, it's a good
practice nonetheless.
Splitting your email across multiple domains
assigned by purpose is a technique
that larger enterprises have long practiced,
and it can be quite helpful on any scale.
Using your main domain for individual
email communication, in conjunction with
dedicated domains for marketing and
transactional emails, makes it easier to
employ diff erent management techniques.
In addition to protecting your primary email
domain from any mistakes made in the other
domains, it helps with the 10-lookup limit
of SPF, which can be easily encountered
with only a few include statements.
Consider a Training Program
Many spam-fi ltering systems have an option
to rewrite links contained in emails to impede
phishing attempts. Like anti-spoofi ng
methods, this feature benefi ts from external
enhancement. Consider augmenting your
phishing defenses by implementing a
training program.
In an age when one wrong click can
lead to a catastrophic outcome, the
decision to invest in a spam fi lter is a
modern-day application of a Ben Franklin
adage: " An ounce of prevention is worth
a pound of cure. " Before you embark on
commercialintegrator.com
800-356-5844 * fullcompass.com
Free Shipping | Free 2-Year Service | Low Price Guarantee | Flexible Financing | Certified Experts
such an endeavor, become familiar with
your mail fl ow. Don't hesitate to collaborate
with experts. Plan to allocate resources
to review and learn how your spam
fi ltering is faring. Implement a DMARC
policy and check the reports. Consider
fi ltering outbound email and, if you do,
exclude your actual mail server addresses
from your SPF policy. Use dedicated
domains or subdomains to create logical
separation between the distinct types of
mail that you send. Strengthen your team's
skills with training and testing.
All these strategies, taken together, will
give your organization a good chance of
avoiding catastrophe and enjoying
continued success.
Link Porterfi eld is founding
member with epic.network, and
member of The ASCII Group
since 2015.
Celebrating Over 45 Years As the Top Choice for Pro Audio,
Video, and Lighting Integrators and Contractors
AUGUST 2022 Commercial Integrator
15

http://www.fullcompass.com http://www.commercialintegrator.com

Commercial Integrator August 2022

Table of Contents for the Digital Edition of Commercial Integrator August 2022