How to Whitelist by Content Compliance in Google Workspace and Google Apps

The instructions below show you how to whitelist KnowBe4's simulated phishing emails and training notifications by content compliance in your GSuite environment. This article reflects our most up-to-date best practices for whitelisting with your provider. Please be aware that your mail service provider may make changes to how their systems analyze our emails at any time. If you are having issues whitelisting using the procedure below, please contact our support team and they will be happy to assist you.

Content compliance is an alternative method to whitelisting by IP address in our Whitelisting by IP address in GSuite and Google Apps article. Use the method below if you have an existing inbound gateway to use the content compliance rule or if you are unable to configure the inbound gateway.

This method of whitelisting is a two-part process. Use the jump links below to navigate to each part:

• Part 1: Add KnowBe4's IP addresses to Email Whitelist
• Part 2: Enabling Whitelisting by Content Compliance
•  

Part 1: Add KnowBe4's IP addresses to Google's Email Whitelist

Below are instructions on how to set up your IP allow list for Google Workspace and Google Apps. These instructions were gathered from Google's Email Whitelist in Google Workspace article.

1. Log in to https://admin.google.com and select Apps.
2. Select Google Workspace.
3. Select Gmail.
4. Select Spam, Phishing and Malware.
5. Under the Organizational Unit section, highlight your domain. Do not select a sub-organizational unit (OU).

   Note: Google Workspace does not allow whitelisting by IP Address for individual OUs, only the entire domain.

   

6. In the Email whitelist section, enter our IP addresses separated by commas. For the most up-to-date list of our IP addresses, please see this article.
7. Click Save.

Back to top

Part 2: Enabling Whitelisting by Content Compliance

Below are instructions to whitelist by content compliance policy. The instructions provided were gathered from Google’s Set up rules for content compliance article.

1. Log in to https://admin.google.com and select Apps.
2. Select Google Workspace
3. Select Gmail.
4. Select Compliance.
5. Scroll down to the Content compliance section. Click Add a Rule.
6. Configure the Content compliance rules using the settings below.
   1. Select the Inbound checkbox under Email Messages to Affect.
   2. Under the If ANY of the following match the message, create the following expression:
      1. Set the first expression to Metadata match.
      2. Set the Attribute to Source IP.
      3. Set the Match type to Source IP is within the following range.
      4. Add one of KnowBe4's IP addresses in the Source IP is within the following range field. For the most up-to-date list of our IP addresses, please see this article.
      5. Click Save.
      6. Repeat the three steps above for each of our IP addresses.
         

1. 3. Add another expression under If ANY of the following match the message with the settings defined below:
      1. Select Advanced content match from the first drop-down.
      2. Set the Location to Full headers.
      3. Set the Match type to Contains text.
      4. Set the Content to X-PHISHTEST TOKEN.
      5. Click Save.

7. Check the following checkboxes under If the above expressions match, do the following.
   1. Under Spam, select Bypass spam filter for this message.
   2. Under Encryption, select Require secure transport (TLS).

We recommend setting up a test phishing campaign for yourself or a small group of users after you follow the steps in this procedure to ensure your whitelisting was successful. The setting may take up to an hour to propagate to all users, so wait at least an hour before testing.

Back to top