Description
The Domain Health Check validates that a domain is in a healthy state for working with Shield and that all required security components are functioning as expected. It performs a series of diagnostic checks to identify configuration issues that could prevent Shield from properly protecting the domain.
How to Perform a Domain Check
Domain Health Checks are performed via View Domains on the Shield organization page. Click the heart next to the tenant domain that needs to be reviewed.
The courier.shield.security domain is created during the deployment process and will remain in a red/Unhealthy state.
What the Domain Check Verifies
-
Mail Exchange (MX)
The MX (Mail Exchange) record determines where email for your domain is delivered. Your MX record correctly points to Microsoft 365 so mail is delivered to your tenant. -
Sender Policy Framework (SPF)
The SPF (Sender Policy Framework) record authorizes which servers can send email on behalf of your domain. Your SPF record authorizes Microsoft 365 so outbound mail is trusted by receiving mail servers. -
DKIM
The DKIM (DomainKeys Identified Mail) record lets receiving servers verify that outbound email was authorized and not tampered with. Your domain publishes Microsoft 365 DKIM CNAMEs so signed mail validates at recipients. -
DMARC Policy
DMARC (Domain-based Message Authentication, Reporting & Conformance) tells receiving mail servers how to handle messages that fail SPF or DKIM checks. A published DMARC policy strengthens authentication for your domain.
Health Status
Each component is evaluated independently and assigned a status:
- Healthy – The component is correctly configured and operating normally.
- Degraded or Unhealthy (if applicable) – The component requires attention. Selecting the item provides additional details to help identify and resolve the issue.
When to Run a Domain Health Check
Run a health check on a domain if it appears in a degraded or unhealthy state. Note that there might be no correction needed for degraded health domains.
Related to
Updated