If you are deploying the inbound relay as a Proof of Concept (PoC), or if you simply do not wish to apply Inbound Shield protection to all of your mailboxes, please follow the instructions below.
Note: these steps should only be performed after you’ve finished creating the required connectors and rule as specified in the configuration guide.
Editing the routing rule
First, log into the Google Admin Console with your admin credentials.
Then, navigate to the “Compliance” section and scroll down to “Content Compliance” (see figure 1).
Find the routing rule for “Trustifi Inbound Shield” and click on the “Edit” button to edit the rule.
Figure 1: editing the routing rule
Showing more options
Scroll down to the end of the routing rule and click on “Show options” (see figure 2).
Figure 2: showing more options
Selecting the filter option
The envelope filter allows multiple options, select the best option for your purposes (see figure 3):
Single email addressPattern matchGroup membership
We suggest using the “Group membership” option, which will be covered in the next steps.
Figure 3: selecting the filter option
Selecting groups
Once you’ve selected the “Group membership” filter, a pop-up will appear listing all groups in the organization (see figure 4).
Select the relevant groups for this configuration.
Note: if this is a PoC, it is recommended to create a new group which will include only members who will take part of the PoC.
Figure 4: selecting groups
Verifying the selected groups
After the groups have been selected, make sure they are all listed in the filter (see figure 5).
If everything is in place, click on “Save” to save the routing rule changes.
Figure 5: verifying the selected groups
Updating the Trustifi portal
After the rule changes have been made in Exchange, open the Trustifi web portal and navigate to “Inbound Management” > “Plan Settings”.
Scroll down to “Email Relay Integration” and find the “Addresses” section (see figure 6).Here you will need to add the individual users or groups that will be protected by Inbound Shield.
Figure 6: selecting groups/addresses in the Trustifi portal
Note: If you choose to enable protection for all mailboxes in the future, you will need to both change the routing rule in Google Workspace and remove the users/groups from this field in the Trustifi portal.
Otherwise, only the specified addresses will be protected.