Setting up SPF records

Dear Experts

Please can someone assist me.

I need help setting SPF records in my environment.

I run a hybrid exchange 2010 / 365 with Cisco IronPort C370 as my MTA.

Appreciate any advice.
TTAF4Asked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Ugo MenaCommented:
Open SPF is always a good resource for setting up SPF records:
http://www.openspf.org/

Kitterman SPF test tools will help to validate your DNS SPF records:
http://www.kitterman.com/spf/validate.html
AntzsInfrastructure ServicesCommented:
If you have already setup your IronPort for SPF(http://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/117973-faq-esa-00.html).  
The only other thing to do is to create the SPF record on your DNS Server.  You can use the below to generate the DNS record for SPF.

http://www.spfwizard.net/
http://www.mailradar.com/spf/

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
TTAF4Author Commented:
Hi Anthony

Apologies for the delay. This might seems like a stupid question but do I have to setup SPF records on my Ironport?

I thought that I only need to add the SPF entries to my DNS records?
IT Pros Agree: AI and Machine Learning Key

We’d all like to think our company’s data is well protected, but when you ask IT professionals they admit the data probably is not as safe as it could be.

TTAF4Author Commented:
Also, which options do I  choose?

Ironport options
AntzsInfrastructure ServicesCommented:
:)  There are no stupid questions.  Stupid questions are the ones you don't ask.

Yes, you need to configure IronPort to use SPF.  The SPF DNS records are for the IronPort to reference to.  

Which option to choose, well that depends on your requirement.  See the below.
http://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/117973-faq-esa-00.html
TTAF4Author Commented:
Thank you so so much
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Email Servers

From novice to tech pro — start learning today.