You can configure Email Security - Cloud to scan emails in your Google Workspace Gmail inboxes without adding Email Security - Cloud as an inline step (mail flows to Trellix and then Trellix sends to Gmail) in your mail flow.
There are several configuration changes that must be made in your Google Workspace account. You need to create a project with an enabled pub/sub API, a service account (an account to be used programmatically by APIs), and a pub/sub topic within that project. Then configure the objects that connect the elements together and provide the necessary permissions.
To configure Native integration: