G Suite (Google Apps) Integration

This article explains how to configure G Suite to use Spambrella/Proofpoint as your secure email gateway service.

What Is G Suite?

G Suite (also known as Google Apps) is a cloud-based solution from Google which offers email, messaging, security, archiving and other capabilities delivered from Google’s worldwide network of cloud data centers. For more information please see: https://gsuite.google.com/together

Before You Start

Before continuing with the provisioning and configuration of the Spambrella service, it is recommended that you have the information listed below.

Information required for configuring Spambrella

  • MX record(s) for domain(s) you are configuring

Information required for configuring G Suite

  • Spambrella/Proofpoint IPs, Smart Host and SPF
  • Google admin account

Setup Inbound Mail Flow

Spambrella is deployed between the customer’s G Suite environment and the Internet. Inbound mail is routed to Spambrella by changing the customer’s MX records. After email is processed by Spambrella it is routed to G Suite.

Configure Spambrella

Locate your MX record for the domain in G Suite

  1. Sign-In to the Google Admin console.
  2. From the dashboard go to Apps > G Suite > Gmail > Advanced Settings.
  3. While on the General Settings tab, scroll down to Setup > MX records and make note of all the “Points to” values (you can also enter MX records in the search field).

These values will be necessary when you add your domains to Spambrella.

Sign-in to the Spambrella user interface. Adding domain(s) to Spambrella

  1. Click the Domains tab.
  2. Click on New Domain.
  3. Enter the domain name you wish to configure.
  4. Ensure “Relay” is selected for domain purpose.
  5. Enter the delivery and failover destinations values.
  6. Choose the method you wish to use for domain verification.
  7. Click Save.
  8. Repeat if you are adding more than 1 domain.

The delivery and failover destinations refers to the “points to” values captured in the previous section.

Configure G Suite

Configure Inbound Mail Gateway

  1. Sign-In to the Google Admin console.
  2. From the dashboard go to Apps > G Suite > Gmail > Advanced Settings.
  3. While on the General Settings tab, scroll down to the Spam > Inbound Gateway (you can also enter Inbound Gateway in the search field).
  4. Hover the cursor to the right of Inbound Gateway. To create a new inbound gateway setting, click Configure.
  5. Under Gateway IPs, enter the Spambrella IP addresses.
  6. Check Automatically detect external IP.

When this setting is enabled, Gmail scans the message header to locate the first occurrence of an IP address that is not listed in the Gateway IPs. This is referred to as the “external IP.” Gmail considers the “external IP” as the sending IP and uses this IP for SPF checks and spam evaluation.

  1. Check Reject all mail not coming from gateway IPs.
  2. Check Require TLS for connection from the email gateways listed above.
  3. Click Add Setting

OPTIONAL Update Safety Settings

GSuite’s safety settings allow organizations to enable or disable policies related to viewing and accessing email. If you have enabled some or all of these settings you may experience some delivery issues. Please review the following steps to ensure your settings are supported.

  • While signed into the Google Admin console, go to Apps > GSuite > Gmail.
  • Click Safety to expand options.
  • If you have Spoofing and authentication settings enabled (either all or customized) consider the following setting:
    – ‘Protect against any unauthenticated emails
  • Spambrella has already scanned incoming emails for SPF and/or DKIM issues. Emails with issues are scored accordingly and quarantined if they exceed your spam threshold.
  • This setting can be disabled. If it is enabled it may cause unexpected delivery issues for incoming email.

Setup Outbound Mail Flow

Spambrella is deployed between the customer’s G Suite environment and the Internet. Outbound mail is routed to Spambrella by configuring an outbound mail gateway. This will route all outbound mail to Spambrella.

Configure Spambrella

Enable Outbound Relaying

  1. Sign-in to the Spambrella user interface.
  2. Click the Features tab.
  3. Check Enable Outbound Relaying.
  4. Click Save.

Add Service IP addresses to your Inbound Gateway

  1. While logged into the Spambrella user interface, click the Domains tab.
  2. Click Managed Hosted Services.
  3. Choose Google Apps.
  4. Click Save.

Configure G Suite

Configure Outbound Mail Gateway

  1. Sign-In to the Google Admin console.
  2. From the dashboard go to Apps > G Suite > Gmail > Advanced Settings.
  3. While on the General Settings tab, scroll down to the Routing > Outbound Gateway (you can also enter Outbound Gateway in the search field).
  4. In the Outbound Gateway text field, enter the Spambrella Smart host value.
  5. Click Save.

Update Sender Policy Framework (SPF)

When sending outbound email through the Spambrella gateway, recipients receive mail sent from Spambrella rather than G Suite mail servers. If the recipient’s mail service attempts to verify that the message came from your domain, it must confirm that the gateway server is an authorized mail server for your domain.

To enable this, you need to add the Spambrella SPF record to your domain.

>

Related Case Studies

It doesn't require an arcane knowledge to set the Spam filtering up, the guides are straight to the point and support staff are very helpful. Functionality wise, in short: we do not get spammed. Thanks to Spambrella.

Archiving wise, the new solution is easy to use, searches well and fast and is by far the cheapest we could find at the time. Ten year retention rocks!

Verified Reviewer, Review via Gartner Capterra

The service is great at filtering bad email as well as junk email out while allowing clean email though. I have used a few other options over the years and this is the best I have found. Clients sometimes have trouble configuring their settings to how they want it to be. Or tag emails as approved when they shouldn't and need IT interaction to resolve. Maybe just ease of use or having a more clear way for clients to resolve basics on their own.

Brian M., Review via Gartner Capterra

Robust, versatile, and reliable...
The reliability of the service and the level of protection that it provides. My spam levels immediately dropped to near zero.

There are almost no false positives. And I'm easily able to customize the level of protection with whitelists, blacklists, and sensitivity settings. I'm also a big fan of the antivirus and URL scanning features.

Verified Reviewer, Review via Gartner Capterra

Used the software for: 2+ years - 5/5 Overall
With an ever overloaded department, and with cybersecurity skills shortage getting worse securing the I.T infrastructure.

Offloading the task of e-mail filtering to Spambrella has dramatically helped in the department's performance. The only drawback in our case is that the service is hosted outside of our territory and thus out of the legal jurisdiction.

John P., Review via Gartner Capterra

I found spambrella to be easy to set up and has dramatically reduced the number of spam emails hitting our inboxes. It was easy to 'train' the software to release any genuine emails that were caught or add any spam that was not picked up.

Within a couple of weeks of use virtually no spam arrived to our mailboxes. Spam and phishing emails are a growing problem for everyone I'm sure. I now get a very low incidence of spam.

David F., Review via Gartner Capterra

Easy to onboard my customers from another spam filtering system. Very fast and haven't had any downtime in the 9 months since I have moved to Spambrella. When I have had to use support, responses where quick. I had to move all my customers from another filtering system with little notice. After I moved my customers I realised how bad the old solution I used was. Contact with Sales and Support always been professional

Allen B., Review via Gartner Capterra

Latest blog posts

  • On October 26, 2020
What is Kovter Malware?

Kovter is a fileless malware that attempts to remain invisible and targets the Windows operating system. Kovter avoids detection as it relies on the host…

Read more
  • On October 8, 2020
What is Emotet Malware and how is it Delivered?

Emotet originally arrived on the scene as a new banking trojan in 2014. In the past 12 months, however, it has evolved from a standalone…

Read more
  • On June 4, 2020
What is LNKR Google Chrome Extension Malware?

LNKR malware uses browser extensions in Googles Chrome to track browsing movements and activities of users and then overlays ads on legitimate websites. Using extensions…

Read more
  • On June 3, 2020
The Email Laundry End of Life?…

June 1st 2020: Fireeye end of life The Email Laundry email security service. This comes as a surprise to many as Fireeye acquired The Email…

Read more