Best practices for Google Workplace (formerly G Suite)

This article contains recommendations and best practices to use if your mail is hosted on Google Workplace.

Create an Inbound Gateway

When you create an inbound gateway, you are telling Google that your mail is processed by MX Guardian before reaching the Google servers. 

To create an inbound gateway:

1. Sign in to the Google Admin console.
2. From the dashboard, go to Apps > Google Workspace > Gmail.
3. Scroll down to Spam, phishing, and malware
   
   
   
   
4. Click the pencil icon to the right of Inbound gateway.
   
   
   
   
5. Select the checkbox to enable the feature.
   
   
6. Under Gateway IPs, add the MXGuardian IP addresses which can be found at https://mxguardian.net/ips. You need to add each address one at a time. The steps are:
   
   
   1. Click Add
   2. Type (or copy & paste) the first IP address
   3. Click Save
   4. Repeat for each of the IP addresses listed
      
      Note: Please make sure to add both the IPv4 and IPv6 addresses
      
      
7. For the highest level of security, select these three checkboxes:
   1. Automatically detect external IP
   2. Reject all mail not from gateway IPs
   3. Require TLS for connections from the email gateways listed above
      
8. Click Save at the bottom of the Inbound Gateway section. The changes should take effect in a few minutes.

More information can be found at: https://support.google.com/a/answer/60730?hl=en