Description
Configuring an inbound mail route on the G Suite domain is required to restrict message delivery from Mailprotector's servers and prevent spammers from using a direct connection to Google Gmail host addresses, bypassing Mailprotector scanning.
Outbound mail route configuration steps are available in the Google Workspace Outbound Mail Routes article.
Applies to:
Google Workspace, G Suite, Business Starter, Business Standard, Business Plus, Enterprise
Prerequisites
Before configuring the Google Workspace mail routes, the Mailprotector Console should have the domain, inbound SMTP host address, and users configured to ensure the Mailprotector solution is ready to scan and protect the domain.
If the domain and users are not configured in the Mailprotector Console, please perform the steps in Step 1 - Add the Customer and Domain and Step 2 - Add Users.
You should also have access to the domain's public DNS zone. Changing the MX record is a required step to provisioning Mailprotector. The MX record should be modified before the inbound mail route is configured on Google Workspace. View Step 3 - Change the DNS MX Records for more information.
Configuration Steps
Inbound Mail Route Configuration
- Go to the Google Admin Console and click on Apps. Select Google Workspace then Gmail. Click on Spam, Phishing and Malware to begin the configuration process.
- Hover over Inbound gateway and click on
Edit.
- Check the box to Enable the gateway then add the three Mailprotector inbound transport IP addresses:
52.0.31.31
52.0.74.211
52.0.70.91
Check the boxes for Automatically detect external IP and Reject all mail not from gateway IPs. This will allow Gmail to evaluate a sender's correct origin IP address and prevent spammers from going around Mailprotector's systems. If the domain requires TLS connections for incoming mail, check the box for Require TLS for connections from the email gateways listed above.
- At the bottom of your browser window, you will see a notice stating: Most changes take effect in a few minutes. Click on SAVE to complete the Inbound Mail Route configuration.
Although most changes take effect in a few minutes, they could take up to 24 hours to propagate to all users in the Workspace domain.
Updated