Whitelisting for Google Gsuite

Step 1: Add our IP addresses to your Email whitelist

If you do not have a cloud-based spam filter in front of GSuite, this is the recommended setting which may take up to an hour to deploy to all users. We recommend waiting at least an hour before testing.

  1. Log in to https://admin.google.com. You should see a screen as shown below. This is your Google Admin console.

  2. Go to Apps.

Figure 1. GSuite Apps Settings

3. Go to GSuite.

Figure 2. G Suite Settings

4. Go to Gmail.

Figure 3. Gmail Settings

5. Scroll to the bottom of the Gmail page and select Advanced Settings.

Figure 4. Gmail Advanced Settings

Enter the following IP address once you see Figure 5.

  • 149.72.42.201

  • 37.1.145.35

  • 37.1.145.36

  • 149.72.154.87

  • 149.72.161.59

Figure 5. Entering IP addresses into Email Whitelist Section

6. Scroll down to the bottom of the page, and click Save.

Note: It can take up to an hour for any changes to take effect. You can track changes in the Admin console audit log.

Step 2: Add the Platform's IP addresses as inbound Gateway.

These settings would help ensure that Gmail doesn’t classify the simulated phishing test messages from the platform as spam, and it would prevent the following Google banners from appearing in your user’s inbox.

Figure 6. Gmail Dangerous Email Tag
  1. Go to the Gmail Advanced Settings.

    1. Google Admin console > GSuite > Gmail > Advanced Settings.

  2. On the left, select your domain.

  3. Scroll to the Inbound gateway setting in the Spam section. Hover over the setting and click the Configure button to create a new setting. You should see a screen as shown below.

Figure 7. Inbound Gateway Settings

4. You should see a screen as shown below.

Figure 8. Configure Inbound Gateway Settings
  1. Configure the Inbound Gateway using the settings below:

    1. Gateway IPs:

      1. Add the the platform's IP addresses: 149.72.42.201,37.1.145.35, 37.1.145.36, 149.72.154.87, 149.72.161.59.

      2. Leave the "Reject all mail not from gateway IPs" box unchecked.

      3. Check the Require TLS for connections from the email gateways listed above box.

    2. Message Tagging:

      1. Check the Message is considered spam if the following header regexp matches the box.

      2. Enter a text for the Spam Header Tag that is unlikely to be found in a PST email. This field is required.

        • Example: "kzndsfgklinjvsdnfioasmnfroipdsmfs".

  2. Select the “Disable Gmail spam evaluation on mail from this gateway; only use header value” option.

  3. When done, click Save.