Configure Google Workspace Domain's Advanced Settings

Although we strive to provide the most up-to-date information, the instructions covered in this Google Workspace configuration may change. To ensure you have the correct up-to-date information, please refer to the Google Workspace website.

Advanced Settings

  1. Log in to your Google Workspace using the Administrator credentials
  2. Navigate to the Admin panel

  3. Expand the Apps section in the left-hand menu or select it from the tiles in the main pane
  4. Select Google Workspace

  5. Click on Gmail

  6. Select Authenticate Email and disable DKIM

  7. Return to the Gmail settings and click into Spam, Phishing and Malware

  8. Setup the inbound gateway using the SpamExperts Hosted Cloud Delivery IPs

    9. Do not use the Email Allow list, Pre-Delivery Scanning or Auto Detect External IP settings in Google Workspace. These settings directly conflict with SpamExperts settings and may cause issues with mail delivery.

  9. Return to the Gmail settings and navigate to Routing

  10. Enter smtp.antispamcloud.com for the Outbound Gateway

  11. Click Save

Configure Internal Email Routing

Create Routing Rule

  1. Log in to your Google Workspace using the Administrator credentials
  2. Navigate to the Admin panel

  3. Using the three line menu icon in the upper left corner, go to Apps
  4. Click on Gmail

  5. Navigate to Hosts

  6. Select Add Route

  7. Name the route something recognizable, such as Internal Emails Route
  8. In the Specify email server field, select Single host
  9. Enter aspmx.l.google.com and Port 25
  10. Deselect Perform MX Lookup
  11. Ensure the following checkboxes are selected:
    • Require mail to be transmitted via a secure (TLS) connection (Recommended)
    • Require CA signed certificate (Recommended)
    • Validate certificate hostname (Recommended)
  12. Click Save

Apply Routing Rule

  1. In Apps > Gmail

  2. Navigate to Routing

  3. Click Add Another Rule

  4. Name the rule something recognizable such as Internal Emails Route Rule

  5. Select Internal - Sending
  6. In Section 2, select Modify Message from the dropdown
  7. Select Change route and select the rule created in Create Routing Rule
  8. At the bottom of the window, expand Show options
  9. Ensure you select Users and Groups
  10. Under Section C, configure settings as follows:
    1. Select Only affect specific envelope senders
    2. Choose Pattern Match from
    3. Enter the domain name in the Regex field i.e. my-domain.invalid
  11. Click Save

Disable SPF/DKIM Checks

Performing SPF and DKIM checks at this stage can cause emails to be falsely marked as spam, and so our recommendation is to disable the Google Workspace SPF and DKIM checks.

  1. Log in to your Google Workspace using the Administrator credentials
  2. Navigate to the Admin panel

  3. Using the three line menu icon in the upper left corner, go to Apps
  4. Click on Gmail

  5. Navigate to Safety

  6. Select Spoofing and Authentication

  7. Deselect Protect against any unauthenticated emails
  8. Deselect Apply future recommended settings automatically
  9. Click Save

Once the Domain is configured in Google Workspace, return to SpamExperts to Check your Domain can Communicate with the Google Workspace Mail Servers.

Disclaimer: This documentation may contain references to third party software or websites. N-able has no control over third party software or content and is not responsible for the availability, security, or operation, of any third-party software. If you decide to utilize a release involving third-party software, you do so entirely at your own risk and subject to the applicable third party’s terms and conditions of the use of such software. No information obtained by you from N-able or this documentation shall create any warranty for such software.