Email Security - DELETED status

What is your current policy? See: https://doc.sophos.com/central/Customer/help/en-us/ManageYourProducts/EmailSecurity/EmailSecurityPolicy/Authentication/MessageAuthentication/EmailSenderCheckSequence/index.html#message-authentication-decision-table 

Our policy is set to

In the mail header is shown

But when I try to fetch the DKIM record by mxtoolbox I get an error message that the selector "selector2-BikeleasingService-onmicrosoft-com" was not found:

https://mxtoolbox.com/SuperTool.aspx?action=dkim%3abikeleasing.de%3aselector2-BikeleasingService-onmicrosoft-com&run=toolpage

So is the error on customer side (bikeleasing.de)?

Best regards

Tino

The customer has "

v=DMARC1; p=reject; rua=mailto:dmarc-aggregate@emailin.bikeleasing.de; ruf=mailto:dmarc-afrf@emailin.bikeleasing.de; ri=86400; fo=0:1:d:s;"

Which means: Reject - You have "conform to sender policy" - Therefore Central will "confirm" and reject the email. 

The customer has "

v=DMARC1; p=reject; rua=mailto:dmarc-aggregate@emailin.bikeleasing.de; ruf=mailto:dmarc-afrf@emailin.bikeleasing.de; ri=86400; fo=0:1:d:s;"

Which means: Reject - You have "conform to sender policy" - Therefore Central will "confirm" and reject the email. 

So the mail was sent in a wrong way from @bikeleasing.de?

The selector of DKIM should be selector2-BikeleasingService-onmicrosoft-com - or am I wrong?

So Central works right, but the sender has sent the mail in a wrong way?

Likely, you had no information about this in your screenshot.

You can check with tools out there, what happend. Likely something went wrong like SPF or DKIM and this triggers the DMARC policy to reject it. 

I marked the selector in my screenshot?! :-P

I'll contact the mail partner to go further on.

Thanks for your fast reply.

I mean the Sender IP, the DKIM Signature etc. 
DMARC means, somthing of those values are wrong.