DMARC authentication result shows "p=none" despite that "p=quarantine" is defined in DNS

Products

• Messaging Gateway

Issue/Introduction

On a DNS server, a DMARC record is defined as "v=DMARC1; p=quarantine; rua=user@<test_domain>.xxx.xxx; ruf=user@<test_domain>.xxx.xxx". However, the DMARC result of a Message Audit Log shows "dmarc=pass (p=none, dis=none) header.from=<test_domain>.xxx.xxx" as shown below when the DMARC Sender Authentication passes. 

Whereas, if the DMARC authentication fails, it shows "dmarc=fail (p=quarantine, dis=quarantine) header.from=<test_domain>.xxx.xxx" as defined in the DMARC record.

Environment

SMG supported all versions.

Resolution

This works by design. When the DMARC Sender Authentication passes, a 'pass' verdict will get "p=none, dis=none".