Skip to content

Page permalink

Always use the following permalink when referencing this page. It will remain unchanged in future help versions.

https://docs.sophos.com/central/customer/help/en-us/index.html?contextId=Sophos-Mailflow-SPF-failures-troubleshoot

Troubleshoot SPF failures

In Sophos Mailflow, your emails are routed from Microsoft to Sophos and back to Microsoft. With this routing behavior, Microsoft may sometimes fail the SPF check for your emails. To fix this, include Sophos in your SPF record. This way, Microsoft will see Sophos as a permitted sender, and your SPF will work correctly.

To authorize Sophos as a permitted sender, add the Sophos SPF record to your existing record using the include statement:

  • Existing SPF:

    v=spf1 include:spf.protection.outlook.com -all

  • Example with include:

    v=spf1 include:spf.protection.outlook.com include:_spf.<your region>.sophos.com -all

    To see the SPF domain for your region, see Sophos SPF domains.