No more forged emails! - SPF and DKIM

Secure email is vital to any organization. If you have ever received email from your employee or a company you do business with, but it's actually really from a malicious/unknown source, then you've seen first hand how easy it is to forge emails. Our previous blog post covered how users can prevent important email from landing in their spam folder. This post covers a common question we get from our customer base; why does sent email end up in the recipient's spam folder or isn't delivered at all?

Every recipient is unique and has different spam filtering settings for messages being received. Typically, recipient servers don't provide information about spam filtering to the sender of an email simply because it makes the recipient vulnerable by giving too much information to actual spammers who could then potentially get around the filters. This is where SPF and DKIM authentication come into play. Authentication legitimizes the source of the email to prove it isn't forged and is a thorough way of ensuring your email is delivered to the person you are sending to.

A sender policy framework (SPF) record is a type of DNS (domain name server) record that identifies which mail servers are permitted to send email on behalf of your domain. SPF records are used to prevent spammers from sending email on your behalf. It essentially asks, "is this email coming from an authorized mail server?" If it isn't, the email is likely to be spam.

A DomainKeys identified mail (DKIM) record simply adds a digital signature to emails your organization sends. The email recipient servers check if the signatures match and if so, the email hasn't been tampered with and is from a legitimate sender. Fundamentally, the DKIM check verifies that the message is signed and associated with the correct domain.

Having both SPF and DKIM records in place can greatly reduce the potential of spam email appearing to be sent from your domain and also improves email deliverability. An easy way to check if your domain's SPF and DKIM records are in compliance with Google's recommendation is by going here: https://toolbox.googleapps.com/apps/checkmx/check.

The interlockit.com SPF address declares that Google Apps, Freshbooks, Sendgrid, and MailChimp are all authorized to send email on behalf of our domain. 

Our team at InterlockIT has assisted many hundreds of companies and organizations update and correct their DNS records resulting in very happy customers. Be sure to contact us today to prevent email forgery for good!

Important mail going to spam? Read this!

It happens to a lot of users. Your boss, colleague, or client asks if you've completed the first draft and you look at them with a blank face, with no clue as to what they are referring to. You either missed the email or it somehow landed in your spam folder which you rarely ever check. "Why is important email landing in my spam" you ask? Simple, you get Gmail to stop checking for spam - sort of.

If you're finding that wanted incoming email is landing in spam, here is a way to redirect it to your inbox. Filters are one of the most powerful tools integrated in Gmail. If you understand the power of email filters, you can do quite a lot with them to manage your inbox efficiently and productively. Follow these simple steps to setup a domain filter to automate "spam email" to redirect into your inbox.

1. Click the gear icon in the upper right corner of your inbox and select Settings.

2. Select the Filters and Blocked Addresses tab and at the bottom select Create a new filter.

3. In the resulting popup, place this text (without quotes) “is:spam” into the "Has the Words box", enter the domain name from which wanted mail is landing in spam, and click Create filter with this search.

4. Check the Never send to Spam box (and any other boxes you'd like a match for) and click Create filter.

That's it! You've now created a filter to prevent wanted mail from that specific domain from going to your spam folder. Technically we haven't stopped Gmail from checking spam, but this filter functions in practically the same way, so no more scavenging through your spam folder to find that lost unread email. Next time you get an important email from that domain in spam, it will automatically pass along to your inbox as a regular piece of mail.

In our next post we'll cover why your sent mail may be going to your recipients spam folder and why having your domain's SPF and DKIM records up to date is crucial to having your email delivered appropriately. To learn more about how Gmail and other Google Apps can make your company more efficient and productive, be sure to contact our InterlockIT team! 

Gmail vs. Outlook - Which one?

We spend a significant amount of the day reading and replying to emails, so using the right email client is imperative for optimized productivity and efficiency. The most prominent and favoured email solutions to date are Google's Gmail and Microsoft's Outlook.

To decide which solution works best for your business, it's crucial to address the kinds of features and functions your users require. Outlook is generally the 'comfort zone' option for a lot of users, and has been for some time; it's a familiar and popular application. However, Gmail has been steadily growing in popularity (surpassing 1 billion active users in Q4 2015) and in our experience, it's taken the throne away from Outlook—but how? While Outlook and Gmail both offer a similar experience with basic send/receive functionality, Gmail has taken a step further with lightning-fast mailbox searching, integrated voice and multi-person video chat, and other productivity enhancements such as Priority Inbox. Furthermore, Gmail integrates Google Hangouts, the communication platform of choice of the next generation. Gmail also includes the ability to easily attach and link files stored in Google Drive. Google Apps Learning Center offers a great overview of Gmail and Google Apps.

Although the majority of Gmail 'converts' really enjoy it, we've come across users who prefer Google Apps but insist on using Outlook because of their familiarity with the old-school interface. Many users may struggle and even dislike the change to conversation view in Gmail, but once trained on the benefits, the majority find it really helps manage large volumes of emails without using time consuming methods like sorting by sender and filing in individuals folders. Placing Outlook on top of Gmail excludes users from many powerful Gmail features that can really boost productivity and efficiency. For example, Gmail can merge emails into a single "conversation," which makes it much easier to navigate messages compared to Outlook. This enables the user to view or hide any related correspondence with a simple mouse click, instead of having to shuffle through multiple messages from the same sender. Gmail also upgrades folders with labels, which means that one email can have as many labels as needed versus Outlook, which only understands folders so users can only file a single email in a single folder - how old school is that?! Despite being able to assign multiple tags to one email, once trained with tips to use Google's powerful email search capabilities, many users stop filing in folders and using labels altogether.

Having instant access to your email and files, along with seamless collaboration, is another big selling point for Google Apps. There is no need to download, install, update, and sync legacy applications like Outlook since Google handles all the related maintenance and automatically updates Gmail, so users always get the latest innovations. This way, when you click open your browser or pick up your tablet or smartphone, it just simply works.

One of the other powerful features of Gmail is it's advanced spam filtering system. Gmail offers superior spam filtering which acts like a funnel through which only legitimate mail can pass. By the time you step into your office in the morning, Google ensures that any email that was collectively marked spam by others across the world does not end up in your inbox. Neat!

Gmail spam filtering

Although Outlook offers a familiar interface, Gmail and Google Apps for Work remain the email service of choice for most of our customers. More than 5 million businesses worldwide have moved to Google Apps, allowing their employees to productively collaborate, wherever and whenever they work. Be sure to check out some of the differences and benefits you'll get by switching to Gmail from Outlook and a legacy Exchange ecosystem. We here at InterlockIT have led many migrations, so contact us to schedule yours!

Phishing - Avoiding malicious emails and links

Phishing attacks trick users into sharing personal information online and are typically done through email, ads, or compromised sites that look similar to sites that you may already use. What we see in our customer base are Google Apps and Gmail accounts that get hijacked and then used to send emails to further compromise more accounts. This normally happens when an end user enters their email address and password into a malicious website from an email link supposedly from a coworker or trusted source. Often this is a faked page that uses legitimate logos and text but normally with errors that may raise red flags for you. Phishing emails are also personalized sometimes which makes it more difficult for the recipient of the email to assess credibility.

An example of a malicious website from an email link. It may look legitimate, but the URL shows it's a hacked website.

There are a number of ways users can protect themselves and their organization from being victim to phishing attacks. The best way is to turn on two-step verification. Enabling two-step verification will require the user to authenticate beyond a username and password. It's an extra step, but ensures that the account is extremely difficult to compromise because even if an attacker has your username and password, they are unable to access your account without a unique, time-sensitive code. Here is how you can enable two-step verification for your Google Account.

Phishing is often successful when a user becomes complacent and too busy or rushed to bother checking the source of an email or site. Being aware and diligent, especially towards unexpected emails or attachments, can help you recognize when you are being targeted for phishing. Always confirm that the URL corresponds to the site you're expecting to see and before you enter your credentials, be sure to check for a trusted domain like google.com or facebook.com and that it's not something like google.xyzname.com or facebook.xyzname.com. If you are the slightest bit unsure, don't enter your login information and contact the person who sent you the email.

Another way to ensure the legitimacy of a site is to check whether the URL begins with https:// (s for secure) and has a lock symbol next to it. The lock means that the site is encrypted, which doesn't necessarily mean it's not hacked, but is a dead giveaway if it is missing.

Many account hijackers will email your contacts attempting to also gain access to their accounts, and then delete all your contacts. To add to the maliciousness, email filters may be used so that you don't see emails from people telling you your account has been compromised.

This phishing website attempts to trick users into giving away their login credentials and propagates by email. User's tend to login without actually looking at the URL first. We've reported the link and Chrome has already blocked it.

Tip: Always check the URL in your address bar, because if it's not from a legitimate root domain like google.com, it could be malicious.

If you do come across a malicious site or link, do not forget to report it. You can follow common advice by "reporting to an appropriate party" but  they typically do nothing. Take action and save your coworkers, family and friends from the bad guys by immediately submitting malicious links to Google. Often within as little as an hour of filing the report, the site will get blocked from Google search and Google Chrome. Firefox is relatively fast also, but Internet Explorer can take weeks to start blocking it.

Lastly, virus scanners rarely catch much in our experience but are still a necessary protection for the occasional time they do prevent problems. We recommend Symantec Endpoint Protection because it provides a cloud based console for monitoring your protection status across the company.

Unfortunately phishing sites still increasingly trick many users into surrendering their personal information and credentials. Hopefully this post has shed light on how you can help yourself and others avoid becoming victims of phishing. For all your technical assistance and needs with Google Apps, make sure to contact our InterlockIT team!

Collaboration at its finest! Office 365 Groups and how it compares to Shared Mailboxes, Distribution Lists, and Site Mailboxes

It's often been said that being social is, as a species, our most defining characteristic. We work and play in groups so we can talk, listen, collaborate, interact, and ultimately accomplish something.

These days, collaborating with colleagues can be a real challenge. You have various conversations happening all the time, a multitude of files stored in various places, and countless meetings to co-ordinate and keep track of. People need to be able to get together quickly in order to organize into a team and get stuff done. Members of a group know and trust each other, converse, and share reports and files.

The new groups in Office 365 can make this all a breeze. Groups not only allow you to collaborate but also extensively increase productivity and efficiency. So what is a group? A group is a shared work space for email conversations, files, calendar events, and more where group members can conveniently collaborate and find the important stuff in a sea of noise. Groups enable your company to work like a regular old offline network by simplifying the collaboration process and by connecting you to the people, information, and tools you need.

Creating a group or joining one that already exists is very easy, but keep in mind that groups are public by default, so while you can connect right away without waiting for permission, anybody else in your organization can as well. (You can also set up private groups, but this is a one-time only option; once you've selected a group's visibility, it can't be changed.) Each group features an inbox to keep everyone in the loop on all the latest discussions, as well as a dedicated calendar and document repository. Once you've subscribed to a group you can take part in any of its discussions from your own Office 365 inbox.

When there is a need to meet, group calendars make it a seamless process. Any group member can create or update events to keep the team involved, even if a group manager isn't available. To track group events, just add them to your personal calendar or display the group calendar next to your own.

Because collaboration usually involves working on content, file sharing is essential. One click is all it takes to upload files to OneDrive for Business and grant group members permissions to use them. You can edit or co-author from Outlook web app using Office online. As you work, the side-by-side conversation lets you discuss the changes without leaving the context of your inbox or document. When you're finished, groups automatically makes the latest version available to every member. You can even take your team with you on the road since groups are mobile- and touch-friendly so you can stay on top of conversations, events, and content from any device.

Microsoft offers a range of email collaboration tools including distribution lists, site mailboxes, and shared mailboxes. Each of these options has a different purpose, user experience, and feature set. It can be a little overwhelming to decide which tool is right for you, so here is a brief outline to help you decide which is appropriate for your business.

• Group: A shared workspace that works across all applications in Office 365. This includes a shared inbox, calendar, and OneDrive for Business site for storing files. Users can create, find, and join Groups right from their email or calendar. New and existing users with an Exchange Online or Office 365 subscription can use Groups.
• Shared mailbox: A mailbox for select users to read and send email messages and share a common calendar. Shared mailboxes can serve as a generic email address (such as info@companyname.com or sales@companyname.com) that customers can use to inquire about your company. When the 'Send As' permission is enabled on the shared mailbox, email sent from the mailbox will use the generic address (sales@companyname.com).
• Distribution list: A distribution list is used distribute email messages to two or more people at the same time. Distribution lists are also known as mail-enabled distribution groups. A variant of the distribution group, called the dynamic distribution group, is a mail-enabled Active Directory group object used to send email to a large and evolving group of recipients. The exact recipients are determined by filters and conditions that you specify, such as all members of a particular region or full-time employees.
• Site mailbox: A site mailbox includes SharePoint Online site membership (owners and members) and shared storage through an Exchange mailbox for email messages. A site mailbox brings Exchange email and SharePoint documents together. It serves as a central filing cabinet for the project, providing a place to file project email and documents that can be accessed and edited only by site members. In addition, site mailboxes can have a specified lifecycle and are optimized to be used for projects that have set start and end dates.

These tools are designed to help teams collaborate effortlessly, however groups can be used to replace shared mailboxes or SharePoint sites in some instances. Site mailboxes have project documents that are stored on a SharePoint Online site and team members send and receive project related email via the site mailbox. Shared mailboxes are used by users who delegate working on behalf of a virtual identity (e.g. support@companyname.com) and respond to email as that shared mailbox identity. Finally, Groups are generally used by users who want a collaboration workspace for their group messages, files, and calendar that is integrated with the Office 365 services that they already use. 

Office 365 groups is part of the first phase of Microsoft's plan to integrate Enterprise social features across platforms, including Yammer, Lync (Skype for Business), SharePoint, and Exchange Online. Office 365 Groups is the tool to use if your organization does not need a full-fledged social network experience. Groups makes more sense because it's a great alternative to public folders and distribution groups which are normally the go-to tools used for collaboration and collective productivity.