We have a product in our organization that sends false phishing messages to our staff, in order to catch who is susceptible and provide training. We're trying to whitelist this service so that it's allowed through to our staff, but I can't seem to fully do so.
There's a list of IPs and domains to whitelist. I've added the IPs to:
- Apps > Google Workspace > Settings for Gmail > Spam, phishing, and malware > Email whitelist
- Apps > Google Workspace > Settings for Gmail > Spam, phishing, and malware > Inbound gateways
- I've also chosen "Disable Gmail spam evaluation on mail from this gateway; only use header value" (and entered a random bogus string for the header value)
For the domains, I put them in a list, and added that list to the "Bypass spam filters for messages received from addresses or domains within these approved senders lists" section in Apps > Google Workspace > Settings for Gmail > Spam, phishing, and malware > Spam (and also turned on "Bypass spam filters for messages received from internal senders.")
This gets the messages through to the inbox. However, the message goes through with a large gray banner that says "This messages was not sent to Spam based on your organization's settings". How can I get rid of that?
LinkedIn
Twitter
