Outbound Security setup for Google Workspace: Segmented mail routing

This configuration can be used to direct email from a subset of users out via Paubox, rather than directing all email traffic from your organization out via Paubox. This is done in the Google Workspace Admin Console by creating a group of email addresses, host, and routing rule. 

Note: The complete setup instructions for Outbound Security for Google Workspace are here. The configuration below can be used in place of Part II: Google Workspace - Adjust Gmail Settings.

Note: This method CANNOT be used if there is an existing outbound gateway set in Google Workspace. 

A Paubox subscription or trial subscription is required (don't have one? sign up here!)

Questions? Stuck? We’re here for you!  support@paubox.com

Step-by-step guide

A: Create a group of email addresses

1. Go to your Google Admin Console (admin.google.com) 
2. Click Manage in the Users section of the Home Page.
3. Click Groups section on the left side panel. 
4. Click Create group
5. Name the group: Paubox Encrypted Senders
6. Set the group email address: encryptedsenders@domain.com 
7. Click Next
8. Set the Access type to: Team
9. Click CREATE GROUP
10. Click Add members to Paubox Encrypted Senders
11. Click the yellow + button
12. Type in the email addresses that should send via Paubox and then click ADD TO GROUP
    

B: Set a host (mail route)

1. Go back to the main Google Admin Console (admin.google.com) 
2. Click Apps (9 dots on the left side panel)
3. Click Google Workspace (two options below in the drop down)
4. Click Gmail (below Google Workspace)
5.  On the next screen (Gmail), click Hosts
6.  On the right side of the screen, click ADD ROUTE 
   • Name: Paubox
   • Single Host
   • During setup, you'll be provided with the value for "Enter host name:"
   • To the right of the colon enter: 587
   • Check the box for: Require mail to be transmitted via a secure (TLS) connection
7. Click SAVE

C: Set the routing

1. Go back to the main Google Admin Console (admin.google.com) 
2. Click Apps (9 dots on the left side panel)
3. Click Google Workspace (two below apps)
4. Click Gmail (5 below Google Workspace)
5. On the next screen (Gmail), scroll down and click Routing 
6. Find the subsection called Routing, and click on CONFIGURE when it appears
7. In the Add Setting popup:
   • Short description: Paubox
   • Messages to affect: Outbound and Internal - Sending
   • Check the box for: Route
   • ... on the drop-down select: Paubox
   • Find Encryption at the bottom of the page.
   • Check the box for Required secure transport (TLS)
   • Click on Show options at the bottom of the page.
   • Scroll down to Envelope Filter at the bottom of the page.
   • Check Only affect Specific Envelope Senders
   • Select the drop down and select Group Membership
   • Click on select groups just below and find Paubox Encrypted Senders
8. Click Save