Safelisting by Email Header in GSuite and Google Apps

This article describes how to safelist (whitelist) the Portal's phishing emails in by email the instructions in this article are recommended only if you are using a cloud-based spam filter in front of GSuite. If you are using GSuite for your email and do not have an additional spam filter, you can safelist by IP address according to the instructions found in this article.

1. Log into your GSuite admin console (https://admin.google.com).
2. Click on Apps.
3. Go to G Suite > Gmail.
4. Choose Advanced Settings.
5. Go to the Compliance section (under General Settings).
6. Hover over Content Compliance and click the Edit button.
7. Below the Email messages to affect field check Inbound and Internal - receiving.
8. Click ADD under Add expressions that describe the content you want to search for in each message.
   1. In the first drop-down menu, choose if ANY of the following match the message.
   2. In the second drop-down menu, choose Advanced content match.
   3. In the Location field, select Full headers.
   4. In the Match type field, select Contains text.
   5. In the Content field, enter the header text of your phishing emails. By default, Portal uses X-PHISHTEST.
   6. Click the Save button.
9. In the If the above expressions match, do the following field, select Bypass spam filter for this Message under Spam.