To ensure that our phishing simulation emails are delivered successfully and not marked as spam, admins need to add our domain and IP address to the allowlist in the Google Workspace Admin Console.
Prerequisites: administrator role in the Google Workspace Admin Console
Step 1: Log in to the Google Workspace Admin Console
Go to the Google Admin Console
Sign in using your administrator credentials
Step 2: Navigate to Gmail Settings
In the left-hand navigation panel, go to: Apps > Google Workspace > Gmail
Step 3: Access Spam, Phishing, and Malware Settings
From the list of available settings, click on "Spam, Phishing, and Malware"
Step 4: Add Guardz IP to Email Allowlist
Scroll down to the "Email allowlist" section and click to open it
In the field provided, enter the Guardz phishing simulation IP address: 149.72.40.178
Click "Save"
Step 5: Configure Inbound Gateway
Scroll further to the "Inbound gateway" section
If not already enabled, click the "Enable" button
In the "Gateway IPs" field, enter: 149.72.40.178
Ensure the following box is unchecked: “Reject all mail not from gateway IPs"
Click "Save"
Step 6: Configure Message Tagging
In the "Message Tagging" section (still under “Inbound gateway”):
Check the box: "Message is considered spam if the following header regexp matches"
In the "Regexp" field, enter a unique identifier (e.g., Guardz)
Also check the box: "Disable Gmail spam evaluation on mail from this gateway; only use header value"
Click "Save"
Step 7: Bypass Spam Filters for Guardz Domain
In the "Spam" section, click "Configure” (or "ADD ANOTHER RULE" if rules already exist)
Provide a title, e.g., Guardz
Check the boxes:
“Bypass spam filters for internal senders”
"Bypass spam filters for messages from senders or domains in selected lists"
Click "Create or edit list"
In the address list, add: mailpercents.com (this is the domain Guardz uses for sending simulation emails)
After saving the list, return to the rule configured and choose "Use existing list" selecting the one you just created
Step 8: Save Your Settings
Click "Save" at the bottom of the page to apply all changes
Please note:
Changes may take up to 24 hours to take full effect across Google’s systems