SpamAssassin not blocking emails with invalid SPF?

Hi, Sorry for re-opening this old thread. But need some clarifications here. It seems, just enabling spamassassin is not blocking the emails with invalid SPF - even if we setup Hardfail. To make this work, I had to setup "Apache SpamAssassin" reject spam score threshold" on WHM Tweak settings and set a "SPF_FAIL" score on the "spam filters" option on cPanel. Is this how we need to set this up? Is there any way to reject emails with invalid SPF records globally (Server wide rather than setting the "SPF_FAIL" score on cPanel spam filter)?.