Description
To use Mailprotector solutions with Google G Suite domains, hosts and email routes need to be configured to establish the secure connection between the two services. Detailed configuration instructions are provided in the linked knowledge base articles below.
Applies to:
Google Workspace, G Suite, Business Starter, Business Standard, Business Plus, Enterprise
If the domain you’re working with is on a free, legacy Google Apps account, it cannot use Mailprotector solutions. These legacy accounts do not include the email routing configuration options required to support proper mail flow. In this case, we recommend discussing with your client the advantages of upgrading to a paid Google Workspace or Microsoft 365 email solution.
Prerequisites
Before beginning the configuration of the G Suite mail routes, the Mailprotector Console should have the domain, inbound SMTP host address and users configured to ensure the Mailprotector solution is ready to scan and protect the domain.
If the domain and users are not configured in the Mailprotector Console, please perform the steps in Step 1 - Add the Customer and Domain and Step 2 - Add Users.
You should also have access to the domain's public DNS zone. Changing the MX record is a required step to provisioning Mailprotector. The MX record should be modified before the inbound mail route is configured on Google Workspace. View Step 3 - Change the DNS MX Records for more information.
Configuring the Mail Routes
Inbound Mail Route
The inbound mail route restricts email delivery to Mailprotector's IP addresses. This prevents spammers from using the Google Gmail host addresses and bypassing Mailprotector's filters.
Read the Google Workspace Inbound Mail Route article for detailed configuration instructions.
Outbound Mail Route
The outbound mail routes direct email from Google Workspace through Mailprotector's outbound relay. The relay protects the domain from sending spam if an account is compromised and allows for additional Mailprotector solutions to be applied, such as SecureStore archiving. Read the Google Workspace Outbound Mail Routes article for detailed configuration instructions.
Google Workspace provides the option to create a mail route for internal sending that allows messages between users in the same domain to capture to a SecureStore archive without the need for a third-party journaling configuration only offered in the Enterprise plan. For detailed configuration instructions, read the article Add SecureStore to a Google Workspace Domain.
Updated