Automated End User Quarantine Restore Requests Handling - completely borked

[ToffenDask]

Ever since the new End User Quarantine Restore Requests Handling feature was enabled in our account almost two weeks ago, we have received zero email notifications whenever a user requests a release from quarantine.

Turns out Check Point has started using a new emailing service for these notifications (Mandrill) which a) is not included in the SPF records for our domain (and we have never been asked to include it) and b) now sends the emails from a unified admin email account instead of behalf of the user as before.

Subject: Restore request: You sent a $399 USD payment

Error: ‎550 5.7.509 Access denied, sending domain <redacted>.com does not pass DMARC verification and has a DMARC policy of reject‎

Support has been extremely slow in acknowledging the issue. anyone else seeing this? Unless your DMARC policy is as strict as ours you may or may not have noticed the change.