Video Instructions

Turn on the Comprehensive mail storage setting to ensure that a copy of all sent or received messages in your domain (including users using non-Gmail services) is stored in the associated users' Gmail mailboxes.

Disable the ‘Bypass Spam filter’ option to scan all your emails, including internal senders, for spam. 

Configure DKIM for domain(s) by adding a digital signature to outgoing message headers using DomainKeys Identified Mail (DKIM) standard. 

Enforce Sender Policy Framework (SPF) to prevent your users from getting spoofed. With SPF enforced, only designated mail servers will be authorized to send an email on behalf of your users.

Configuring DMARC helps email senders and receivers verify incoming messages by authenticating the sender's domain. 

With additional Gmail attachment safety settings enabled, reduce the risk of malware infection by protecting against encrypted attachments and scripts from suspicious senders. You can also choose what action is to be taken based on the type of threat.

Enable additional Gmail spoofing safety settings to reduce your risk of spoofing based on similar domain names or employee names.

Enable the Security Sandbox option for Gmail to scan or run attachments in a virtual environment before delivering it to the user’s inbox.

Configure SMTP MTA Strict Transport Security (SMTP MTA-STS in short ) protocol to provide an extra layer of security for all your outbound communication by enforcing end-end email encryption. 

Enable the spam header settings to safeguard your organization from spam attacks and to ensure maximized spam filtering capacity in all default routing rules. 

Use a physical security key to verify user identity and to strengthen the password recovery process thus protecting you from phishing attacks.