Is AppRiver Office 365 down?
Current AppRiver Office 365 status is WARN

Investigating - *Please Note before proceeding* - If you are using Email Threat Protection Smarthosting for outbound service, DKIM/DMARC will need to be configured there instead of O365 – see the following link for ETP Smarthosting - Zix | AppRiver Status - DKIM signing for Email Threat Protection Yahoo/Aol and a few other providers recently made some security updates and are beginning to require DKIM/DMARC in addition to SPF. These records would need to be configured with your DNS provider, in order to prevent the rejections, you have received.Please ensure you have SPF (TXT) record configured first before proceeding with O365 DKIM/DMARC.  How to enable/add DKIM:Generate DKIM keys within the M365 Admin Center - 1. Sign-in through the M365 admin center as a global administrator2. In the left-hand menu, click on Security under Admin Centers. This will take you to the Microsoft Defender Portal.3. From there, Under Email & Collaboration - click on Policies and Rules --> Threat policies --> Email Authentication Settings --> DKIM --> Select your Domain and Enable.4. You can select Generate DKIM Key and it will populate the required CNAME record information   OR   It will show in the form of an error message when attempting to enable. This error message also contains the needed CNAME records.***Once you have configured these two CNAME records on your DNS side, please go back to the same location mentioned above in the Microsoft Defender Portal.***1. M365 admin center --> Security Admin Center (Microsoft Defender Portal) --> Policies and Rules --> Threat policies --> Email Authentication Settings --> DKIM --> Click on Domain and Enable DKIM.***DKIM should now be successfully be enabled.*** How to add DMARC:1. After DKIM is enabled and configured, please contact your DNS provider for assistance with creating a DMARC record. There is also third-party tools and sites that can be used as a DMARC generator to generate a DMARC record for you. Then you can add the record through your DNS provider. ------------ For more information regarding both records, please see the articles below. Set up DKIM to sign mail from your Microsoft 365 domain:https://learn.microsoft.com/en-us/microsoft-365/security/office-365-security/email-authentication-dkim-configure?view=o365-worldwideSet up DMARC to validate the From address domain for senders in Microsoft 365:https://learn.microsoft.com/en-us/microsoft-365/security/office-365-security/email-authentication-dmarc-configure?view=o365-worldwide Mar 11, 2024 - 10:47 CDT

Update - If you still experience password prompts on your Outlook clients after ruling out your third-party AV causing the issue, you should check the following registry key / value on your computer unless you have an Active Directory Group Policy Object (GPO) policy overriding your local computer. Please check with your IT admin if you have a GPO configured (Please Note, Zix/Appriver support cannot directly support GPO configurations). ----------------------------------------------------------------------------------------------------------------------------------------From user computer: - Registry key: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa - Registry value: LmCompatibilityLevel - It must be set at least to a value of 3 which is Send NTLMv2 response only. If the key is not there the computer will default to a value of 3 unless you have an Active Directory GPO overriding the local computer.------------------------------------------------------------------------------------------------------------------------------------------- If your admin is using Active Directory GPOs instead to set your security policy, please verify the following Policy location to ensure it is set to one of the supported values below. (Please Note, Zix/Appriver support cannot directly support GPO configurations). Policy location: Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options Policy Name: Network security: LAN Manager authentication level Unsupported valuesSend LM & NTLM responsesSend LM & NTLM - use NTLMv2 session security if negotiatedSend NTLM responses only Supported valuesSend NTLMv2 responses onlySend NTLMv2 responses only. Refuse LMSend NTLMv2 responses only. Refuse LM & NTLMNot Defined Mar 09, 2024 - 19:40 CST

Investigating - We are investigating reports of some users receiving bounce back notices indicating Microsoft 365 sending IP listed on a third party blocklist. We will post a health service alert once we have received confirmation from Microsoft. We will provide updates as we receive them. Feb 27, 2024 - 10:48 CST

Update - We are continuing to monitor for any further issues. Jan 31, 2024 - 13:50 CST

Update - Current status: Our efforts to collaboratively delist affected IPs with the third-party antispam service are continuing on a case-by-case basis as we identify additional blocked addresses. In parallel, we're examining IP block patterns we've identified via our telemetry so we can pinpoint the most efficacious rule changes and optimizations to reduce outbound spam and alleviate impact. Scope of impact: This issue may affect any user's mail flow if the recipient is leveraging a specific third-party anti-spam service to filter email messages.Next update by: Monday, January 29, 2024 at 6:00 PM CST Jan 26, 2024 - 14:50 CST