Exercise 17: Advanced email security

As an Administrator, you can protect incoming mail against phishing and malware by using allowlists, denylists, approved senders lists, and inbound mail gateways.

Let's see the scene

In this exercise, you’ll practice configuring spam, malware, and phishing settings.

Sam has sent you an email regarding the organization's spam filtering.

Exercise directions

Part 1: Configure custom spam filter

Step 1

If you’re not already signed in, sign in to your domain as the Administrator at admin.google.com.

Step 2

From the main menu, navigate to Apps, select Google Workspace, and then click Gmail.

Step 3

From the Settings for Gmail page, click on the Spam, Phishing and Malware section.

Step 4

Scroll to Spam, and click CONFIGURE.

Step 5

In the Add setting dialog that appears, enter Approved senders only in the Spam text box.

Step 6

Under Options, check the boxes next to Be more aggressive when filtering spam and Put spam in administrative quarantine.

Step 7

Under the Bypass spam filters for messages from senders or domains in selected lists option, click Create or edit list.

Step 8

From the Add setting box, click SAVE. You will be directed to the Manage address lists page.

Step 9

Click ADD ADDRESS LIST.

Step 10

Click BULK ADD ADDRESSES, and copy/paste the following values into the Email address or domain name text box:

alex.b@yourdomain, raha.g@yourdomain, mark.j@yourdomain, lars.e@yourdomain, sam.m@yourdomain, timothy.l@yourdomain, izumi.e@yourdomain, cruz.m@yourdomain

Step 11

Click ADD.

Step 12

Click SAVE.

Step 13

Go back to the Add setting dialog, and click on the Use existing list link.

Step 14

Check the box next to the Approved senders only list.

Step 15

Click SAVE.

-- --

Part 2: Set up inbound gateway