A - E
F - L
M - S
T - Z

Forcepoint / Websense

Supports SPF Supports DKIM

How to Set Up/Modify SPF for Forcepoint-Websense

To implement SPF authentication for your domain, you will need to log in to your Forcepoint account to verify your domain and copy your TXT records. Forcepoint utilizes an include mechanism during the set-up process. For example, if you do not have an SPF record on your domain, the following scenario is the most common and would pass SPF:

v=spf1 ~all

If you do already have an SPF record on your domain, simply add the following to it:

To create an SPF record for your domain name, follow these steps:

1. Log in to control panel for your domain DNS host

2. Select My Account menu and choose Domains

3. Expand Domains and click Manage DNS button for domain you want to verify

4. Scroll to Records section and click Add button to add DNS record

5. Select TXT from Type dropdown menu

6. In Host field, specify @

7. In TXT Value field, create a TXT record with the following specifications:

v=spf1 ~all

8. Decide how you want to enforce SPF failures:

~all results in a soft fail (not authorized, but not explicitly unauthorized)

-all results in a hard fail (unauthorized)

?all is neutral (similar to no policy)

As shown above, enter your choice after v=spf1

9. Click Save

How to Set Up/Modify DKIM for Forcepoint-Websense

You can enable DKIM for your domain from Forcepoint’s control panel after creating the required TXT record in your domain’s DNS manager. The DKIM configuration has three major steps:

1. Generate unique public DKIM Key value using default selector in Forcepoint

2. Create TXT record in your domain’s DNS Manager (domain register/DNS provider)

3. Validate selector and enable DKIM in Forcepoint

To complete the first step, follow these instructions:

1. Log in to control panel for Forcepoint using Administrator credentials

2. Click Add in DKIM Signing Keys section to open Add Signing Key page

3. Enter name for your key in Key name field

4. Select one of following options for creating your key:

- Generate key (default) to create private key (only 1024bit supported)

- Private key to enter a key you already created (paste into entry box)

5. Click OK

As a user of this outbound email provider, Forcepoint-Websense customers are afforded DKIM signing because it supports that mechanism. By utilizing Forcepoint’s self-service portal, you can manually set up DKIM at your convenience via TXT records mentioned above. Overall, this Forcepoint product provides beneficial components (e.g., DKIM signing, self-service set up with TXT records) that result in a streamlined process.

DKIM/SPF Setup Highlights

The below sections highlight notable characteristics of setting up DKIM and SPF for this provider as well as highlighting advanced settings if offered by this Outbound Email Source.


SPF Include Tag Required

This outbound email provider uses an include mechanism to add this provider's IP space to your SPF. To get fully set up with SPF for this provider, you will need to take the provided “include” domain and add it to your SPF record. An example of an SPF record without an include tag is compared to one with the tag added below (the include tags added are denoted in bold).


Initial SPF Record:

HOST TEXT v=spf1 ~all


SPF record include added:

HOST TEXT v=spf1 ~all


This outbound email provider does not allow a custom Return-Path address to be set. 


Supports DKIM Signing

Yes, this outbound email provider supports DKIM signing.

DKIM Setup via TXT record

This outbound email provider uses a TXT record to initiate DKIM set up. You will need to take the TXT record(s) provided to you by the provider and add them to your DNS via your DNS hosting provider.

An example of a DKIM TXT record is shown below.

HOST TEXT k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDPtW5iwpXVPiH5FzJ7Nrl8USzuY9zqqzjE0D1r04xDN6qwziDnmgcFNNfMewVKN2D1O+2J9N14hRprzByFwfQW76yojh54Xu3uSbQ3JP0A7k8o8GutRF8zbFUA8n0ZH2y0cIEjMliXY4W4LwPA7m4q0ObmvSjhd63O9d8z1XkUBwIDAQAB

DKIM Setup Process: Self-Service Dashboard

This email provider offers a self-service dashboard where DKIM records will be setup for the account. To get DKIM setup for this provider you will login to your account at this provider and proceed to the DKIM setup area.