Exercise 16: Email content filtering

Exercise directions

Step 1

If you’re not already signed in, sign in to your domain as the Administrator at admin.google.com.

Step 2

From the main menu, navigate to Apps, select Google Workspace, then select Gmail.

Step 3

From the Settings for Gmail page, click Compliance.

Step 4

Scroll down to the Content compliance row. 

If you have not previously added a content compliance rule, click CONFIGURE. 

Otherwise, click ADD ANOTHER RULE.

Step 5

Enter a short description that will appear within the settings summary, such as Secure Project Jupiter.

Step 6

In the Email messages to affect section, check the Outbound box.

Step 7

Click the Add link in the Expressions box.

Step 8

Change the Expression type from Simple content match to Advanced content match.

Step 9

Set Location to Body.

Step 10

Set Match type to Contains text.

Step 11

Enter Jupiter into the Content field and click SAVE.

Step 12

In the If the above expressions match, do the following section, set the action to Modify message.

Step 13

Under Envelope recipient, check the Change envelope recipient box.

Step 14

Enter sam.m@yourdomain into the Replace recipient text box.

Step 15

Scroll down and click the Show options link.

Step 16

Check the Use address lists to bypass or control application of this setting box, and ensure Bypass this setting for specific addresses / domains is selected.

Step 17

Click the Create or edit list link to create a new list. A new tab will open.

Step 18

Click ADD ADDRESS LIST.

Step 19

Enter the name Executive in the Name text box, and click CREATE.

Step 20

Click Add or ADD ADDRESS.

Step 21

Enter the following email addresses:

• sam.m@yourdomain

• alex.b@yourdomain

• izumi.e@yourdomain

• timothy.l@yourdomain

Step 22

Click SAVE.

Step 23

Return to the Compliance tab, and click Use existing list.

Step 24

Select the Executive list from the Select address lists dialog box

Step 25

Close the dialog box.

Step up 26

Click SAVE to add the new rule.

You have now successfully added a compliance rule. It will trigger if anyone in your organization (except Alex, Sam, Izumi, or Timmy) sends an email externally with the word Jupiter in the subject line or the body of the message. The message will not be delivered. Instead it will be re-routed to Sam's inbox.