Whitelisting PhishGuard by Email Header in Google Workspace/Google Apps

Whitelisting PhishGuard by Email Header in Google Workspace/Google App

The below instructions will show you how to whitelist the phishing emails by email header in your Google Workspace (formerly G Suite) environment. 

This setting is only recommended if you have a cloud-based spam filter in front of Google Workspace. If you are using Google Workspace for your mail without an additional spam filter. Remember, you will also need to whitelist PhishGuard IP addresses or domains in your cloud-based spam filter to make sure emails are delivered successfully.

1. Log on to https://admin.google.com and click Apps.
   
   
2. Click Google Workspace then Gmail.
   
   

   

3. Click Compliance
   
4. Navigate to the Content Compliance section.
5. Click Add another rule.
6. Under the Email messages to affect field check Inbound and Internal - receiving.
7. Click Add below the Expressions tab.  
   • From the first drop-down menu, select if ANY of the following match the message.
   • From the second drop-down menu, select Advanced content match.
   • In the Location field, select Full headers.
   • In the Match type field, select Contains text.
   • In the Content field, enter the header text. The default PhishGuard header is listed in this article.
   • Click SAVE
8. In the If the above expressions match, do the following field, select Bypass spam filter for this Message under Spam.