How do I setup whitelisting in G Suite? Advanced instructions.

The following are advanced settings to ensure G Suite deliverability.

Please also refer to How do I whitelist in G Suite? (Simple Setup).

Step 1: Add the Hook Security's IP address to your Email whitelist.

This is the recommended setting if you do not have a cloud-based spam filter in front of GSuite. The setting may take up to an hour to propagate to all users, so wait at least an hour before testing.

  1. Log in to https://admin.google.com. You should see a screen as shown below. This is your Google Admin console. 
  1. Go to Apps.

    1.png
  2. Go to GSuite.

    2.png
  3. Go to Gmail. 

    3.png
  4. Scroll to the bottom of the Gmail page and select Advanced Settings.

    4.png
  5. On the left, select your domain.

    5.png
  6. Scroll to the Email Whitelist setting in the Spam section. Or, in the search field, enter Email Whitelist.
  7. You should see a screen as shown below.
  8. Enter (copy/paste) the following: IP addresses: 64.191.166.196, 64.191.166.201, 64.191.166.198, 64.191.166.200, 64.191.166.199, 54.80.160.189

    6.png

  9. Scroll down to the bottom of the page, and click Save.

Note: It can take up to an hour for any changes to take effect. You can track changes in the Admin console audit log.

 

STEP 2: Add Hook Security’s IP address as inbound Gateway.

These settings would help ensure that Gmail doesn’t classify the simulated phishing test messages from Hook Security as spam. And, it would prevent the following Google banners from appearing in your user’s inbox.

8.png

  1. Go to the Gmail Advanced Settings.
    • Google Admin console > GSuite > Gmail > Advanced Settings.
  2. On the left, select your domain.
  3. Scroll to the Inbound gateway setting in the Spam section. Hover over the setting and click the Configure button to create a new setting. You should see a screen as shown below.

    10.png
  4. Configure the Inbound Gateway using the settings below:
    1. Gateway IPs:
      1. Add Hook Security's IP'sIP addresses: 64.191.166.196, 64.191.166.201, 64.191.166.198, 64.191.166.200, 64.191.166.199, 54.80.160.189 
      2. Leave the Reject all mail not from gateway IPs box unchecked.
      3. Check the Require TLS for connections from the email gateways listed above box.
    2. Message Tagging:
      1. Check the Message is considered spam if the following header regexp matches box.
      2. Enter a text for the Spam Header Tag that is unlikely to be found in a PST email. This field is required.
        • Example: kzndsfgklinjvsdnfioasmnfroipdsmfs
  5. Select the “Disable Gmail spam evaluation on mail from this gateway; only use header value” option.
  6. When done, click Save.

These steps can vary among organizations. Please contact support@hooksecurity.co if you are still experiencing issues with deliverability.