Skip to main content

How do I whitelist by Email Header in Google Workspace?

K
Written by Karthek S
Updated over a week ago


If your company uses Google Workspace, you can whitelist through the email header. To do this, set up a Content Compliance rule for emails with Right-Hand's email header. This ensures that our simulated phishing emails reach your users' inboxes.

To whitelist Right-Hand by email header in Google Workspace, follow the steps below:

  1. Log into your Google Admin account and select Apps.


    ​

  2. Select Google Workspace.

  3. Navigate to the section titled "Service Status" and select "Gmail".

  4. Within the Gmail section, select "Compliance".

  5. Go to the Content Compliance section.

  6. Click ADD ANOTHER RULE.

  7. Choose the "Inbound" and "Internal - receiving" checkboxes in the "Email messages to affect" field.

  8. Go to the Expressions tab and select the initial dropdown menu.

  9. Opt for "If ANY of the following match the message" from the initial dropdown menu.

  10. Click Add.

11. Modify the configurations within the "Add expressions that describe the content you want to search for in each message" section. Refer to the below screenshot and the provided list for more details on these settings.

A. Choose "Advanced content match" from the initial dropdown menu.

B. Choose "Full headers" in the Location field.

C. In the Match type field, select Contains text.

D. Within the Content field, input the header text that is specific to your organization.

You can ask for the custom header, which is associated to your company tenant in cyberready from your customer success manager. Alternatively you can mail to [email protected] to get the same. The header has the following format:

X-RHS-TID-<unique hash>

E. Click SAVE.

12. Under the "If the above expressions match, do the following" field, check the box labeled "Bypass spam filter for this message" under the Spam category.


We advise initiating a test phishing campaign for yourself or a small group to ensure whitelisting is successful. Please wait up to an hour for the settings to take effect before testing.

Frequently asked questions

Q1. Google now allows a single security policy for the inbound Gateway. In order to get emails from Right-hand I have to disable the spam filter but I cannot do that for all incoming emails. How do I get around this problem?

  1. Navigate to GSuite Admin Console and, from the left menu navigate to Apps → Google Workspace → Gmail.

  2. Click on Compliance Tab and then click on Configure for Content compliance.

  3. A new tab will open and add the following values.

    1. Set RHS - ByPass Spam Rule as the name for the rule or name it based on your choice or convention.

    2. Select `Inbound` inside Email messages to affect.

    3. Click on Add to create a new rule, and a new window will open.

      1. Select Advanced content match.

      2. Select Full Headers inside the Location drop-down menu.

      3. Select Match type Contains text and add the following IPs

        149.72.49.118
        168.245.54.27
        52.74.95.172

        Inside the content field.


        ​

      4. Inside If the above expressions match, do the following section, select Bypass the spam filter for this message.

      5. The rule will be added.

      6. Make sure that the rule applies to all the organization units.

Note: Users might see a warning banner from Google if Google detects any emails as Spam. This banner cannot be hidden. However, it won’t appear every time as the Google algorithm is dynamic.

Did this answer your question?