Google Workspace Native domains require additional setup in Google Workspace. You must configure a compliance rule to define external emails and allow list the IP addresses corresponding to your region.
Note
Emails released from quarantine will be delivered via MX records.
You must also add an additional scope to a Google Workspace authorization. For more information, see Configuring Google Workspace authorizations
To configure a compliance rule to define external emails:
Log in to the Google Admin Center.
Select Apps.
Select Google Workspace.
Select Gmail.
Add a rule in Content compliance.
Click Compliance.
In the Content compliance section, click Configure.
Enter a name for the rule.
Select Inbound.
Select “If ALL of the following match the message” from the drop-down menu.
Add IP addresses to the rule. If more than one IP address is required for your region, add each one separately.
In the Expressions table, select Add.
Select Metadata match from the drop-down menu.
Under Attribute, select Source IP.
Under Match type, select Source IP is not within the following range.
Enter the IP address that corresponds with your region.
Email Security Region
IP Addresses
USA
34.223.36.0/24
3.93.93.0/24
EMEA
3.123.5.0/24
63.34.218.0/24
APJ
3.112.99.0/24
3.112.100.0/24
USGOV
15.200.32.0/24
CA
3.97.207.0/24
3.97.208.0/24
Repeat step 6 until all IP addresses for your region are added.
Click Save.
Add custom headers.
Select Add custom headers.
Click Add.
For the header key, enter "X-ETP-Source".
For the header value, select External.
Click Save.
Click Save.
To allow list the IP addresses:
Return to the Settings for Gmail page.
Select Advanced Settings.
Under Email allow list, enter the IP addresses for your region (listed above). Separate IP addresses with a comma.
Click Save.