Gmail offers robust security features to protect your organization from malware and phishing attacks. As an Administrator, you can configure advanced settings to enhance email security and safeguard sensitive data.
Click each item below to learn more about advanced security settings for Gmail.
Each setting has an action that can be applied to it. As an Administrator, you can choose from the following options: Keep email in inbox and show warning, Move email to spam, or Quarantine.
Click on each tab to learn more.
In this exercise, you’ll learn how to configure settings for:
Attachment protection
Suspicious email link protection for IMAP users
External images and links protection
Spoofing and authentication protection
Emergency! Cybercriminals are targeting your organization. Read Alex’s email to learn about the types of attacks your users are concerned about.
Part 1: Turn on attachment protection
Step 1
If you are not already signed in, sign in to your domain as the Administrator at admin.google.com.
Step 2
From the main menu, navigate to Apps, then select Google Workspace, and click Gmail.
Step 3
Click on the Safety section, then click on Attachments.
Step 4
Ensure the box next to the Protect against encrypted attachments from untrusted senders setting is checked. Under that setting, select Move email to spam from the Choose an action menu.
Step 5
Ensure the box next to the Protect against attachments with scripts from untrusted senders setting is checked. Under that setting, select Move email to spam from the Choose an action menu.
Step 6
Click SAVE.
-- --
Part 2: Turn on suspicious email link protection for IMAP users
Step 1
From the Safety section, click on the IMAP view time protections section and check the Enable IMAP link protection box.
Step 2
Click SAVE.
-- --
Part 3: Turn on warning prompt for untrusted links
Step 1
From the Safety section, click on the Links and external images section.
Step 2
Ensure the box next to the Show warning prompt for any click on links to untrusted domains setting is checked.
Step 3
If you made any changes, click SAVE.
-- --
Part 4: Quarantine messages from suspicious domains
Step 1
From the Safety section, click the Spoofing and authentication section.
Step 2
Ensure the box next to the Protect against domain spoofing based on similar domain names setting is checked. Under that setting, select Quarantine from the Choose an action menu.
Step 3
Click SAVE.
Advanced security features generally work independently of other spam settings you might have previously turned on. For example, even if you've listed a domain as a safe sender in spam settings, the enhanced security features are still applied.
The Spam settings Bypass spam filters and hide warnings for messages from senders or domains in selected lists and Bypass spam filters and hide warnings for all messages from internal and external senders options prevent warning banners for possibly malicious messages.
Warning banners only appear in the Gmail web application. Third-party apps do not display a warning banner.
When you select Quarantine for any of the advanced security settings, the quarantine you select applies only to incoming messages. This is true even when the quarantine you select specifies actions to take on outgoing messages. Allowlist settings don't override the Quarantine option.
For more guidance on advanced safety settings, please explore the Google Workspace Admin Help Center: