Configure Google Workspace Domain's Advanced Settings

Although we strive to provide the most up-to-date information, the instructions covered in this Google Workspace configuration may change. To ensure you have the correct up-to-date information, please refer to the Google Workspace website.

Advanced Settings

  1. Log in to your Google Workspace using the Administrator credentials
  2. Navigate to the Admin panel

  3. Using the three line menu icon in the upper left corner, go to Apps
  4. Click on Gmail

  5. Select Authenticate Email and disable DKIM

  6. Return to the Gmail settings and click into Spam, Phishing and Malware

  7. Setup the inbound gateway using the Mail Assure Delivery IPs

    8. Do not use the Email Allow list, Pre-Delivery Scanning or Auto Detect External IP settings in Google Workspace. These settings directly conflict with Mail Assure settings and may cause issues with mail delivery.

  8. Return to the Gmail settings and scroll down to the bottom of the page for Advanced Settings

  9. In General Settings > Routing enter smtpout25.mtaroutes.com for the Outbound Gateway

  10. Click Save

Configure Internal Email Routing

Create Routing Rule

  1. Log in to your Google Workspace using the Administrator credentials
  2. Navigate to the Admin panel

  3. Using the three line menu icon in the upper left corner, go to Apps
  4. Click on Gmail

  5. Navigate to Hosts and select Add Route

  6. Name the route something recognizable, such as Mail Assure Internal Emails
  7. In the Specify email server field, select Single host
  8. Enter aspmx.l.google.com and Port 25
  9. Deselect Perform MX Lookup
  10. Ensure the following checkboxes are selected:
    • Require mail to be transmitted via a secure (TLS) connection (Recommended)
    • Require CA signed certificate (Recommended)
    • Validate certificate hostname (Recommended)
  11. Click Save

Apply Routing Rule

  1. In Apps > Gmail

  2. Navigate to Routing/Default Routing

  3. Click Configure or Add Another Rule
  4. Name the rule something recognizable such as Mail Assure Internal Emails Route
  5. Select Internal - Sending
  6. In Section 2, select Modify Message from the dropdown
  7. Select Change route and select the rule created in Create Routing Rule
  8. At the bottom of the window, expand Show options
  9. Ensure you select Users and Groups
  10. Under Section C, configure settings as follows:
    1. Select Only affect specific envelope senders
    2. Choose Pattern Match from
    3. Enter the domain name in the Regex field i.e. my-domain.invalid
  11. Click Save

Disable SPF/DKIM Checks

Performing SPF and DKIM checks at this stage can cause emails to be falsely marked as spam, and so our recommendation is to disable the Google Workspace SPF and DKIM checks.

  1. Log in to your Google Workspace using the Administrator credentials
  2. Navigate to the Admin panel

  3. Using the three line menu icon in the upper left corner, go to Apps
  4. Click on Gmail

  5. Navigate to Safety

  6. Select Spoofing and Authentication
  7. Deselect Protect against any authenticated emails and Apply future recommended settings automatically
  8. Click Save

Once the Domain is configured in Google Workspace, return to Mail Assure to Check your Domain can Communicate with the Google Workspace Mail Servers.