Whitelisting in Google Workspace

Using the advanced delivery policy for phishing simulations in Google Workspace, it is possible to whitelist Guardey. This article provides step-by-step instructions for configuring advanced delivery.

1. Log in to the Google Admin Console (admin.google.com).
2. Go to Apps > Google Workspace > Gmail > Spam, Phishing and Malware.
3. Add the IP addresses of the phishing simulation here and save.
4. Navigate to Inbound Gateway.
5. Add the IP addresses of the phishing simulation. This ensures that emails from these IPs are considered safe.
6. Configure the following settings in Inbound Gateway:
   • Check the option Automatically detect external IP (recommended).
   • Leave the option Reject all email not from gateway IPs unchecked.
   • Check Require TLS for connections from the email gateways listed above.

Ask your contact for the correct sending IP addresses for the spearphishing campaign or check here for the IP addresses and domains of the phishing module in the portal.

By following these steps, you can ensure that your phishing simulation is effective and that the emails actually reach the users. This is crucial for an accurate measurement of how well employees can identify phishing attempts.