Onboarding Google Workspace - Outbound

This page includes:

About onboarding Google Workspace - Outbound

You can configure FortiMail Workspace Security to scan outgoing [outbound] emails to detect malicious file attachments and malicious URLs. This outbound functionality can be added to inbound Google Workspace integrations - [Inline and API]. The outbound integration functionality is performed using the Google Workspace API connection method.

Note:

  • You can add this functionality for scanning outbound email only if your organization is already configured to scan incoming email - using either the Google Workspace Inline or the Google Workspace API integration method.

  • Don't enable the outbound scanning functionality if scanning for inbound email is not yet configured.

Scan results for outbound emails will appear in the Scans page in FortiMail Workspace Security. In the Scans page, you can click the Outbound email filter icon [] to show scan results for outbound email only.

  • Outbound scanning includes scanning to detect malicious content - not to detect spam.

  • There is no quarantine available for outbound email scanning. Outbound scanning won't "block" any outgoing emails, even if they are found to be malicious.

  • While scanning of outbound email is enabled, an alert will be sent when a malicious outbound email is detected - if these alerts are configured. [See Admin alerts and reports - options]

  • Outbound scanning may be useful for forensic purposes.

Licensing: There are no additional licensing requirements for enabling outbound scanning.

Onboarding procedure:  Google Workspace - outbound

Perform the following procedure to add outbound scanning to either a Google Workspace Inline integration or a Google Workspace API integration.

The onboarding procedure includes these 3 steps:

Step 1: Enabling outbound mail scanning

Outbound email can be configured to be scanned only if this "outbound" functionality is enabled - as described below.

  1. In FortiMail Workspace Security - in the left navigation menu, select Settings > Bundles and Channels.

  2. Under Enabled Channels, on the right of Email Service > Google Workspace, click Email Service Settings.

    The "Email Service Settings" sidebar opens.

  3. Click Edit [].

  4. Under Google Account Options, select the "Enable outbound email scanning" check box.

  5. Click Save.

Step 2: Configuring outbound mail scanning

After outbound scanning is enabled, as described above, you can configure the required outbound functionality, as described below.

  1. Select Settings > Bundles and Channels.

  2. Under Enabled Channels, locate Email Service, and then click Email service configuration [] on the right.

  3. Click Add A New Email Service - if this option appears.

  4. Select the Organization - if necessary.

  5. Specify the escalation contacts. For details, see Escalation contacts.

  6. In Email Service, select Google Workspace.

  7. In Connection Method, select Google API.

  8. Connection Scope:

    1. Inbound:

      • If the Google Workspace API Inbound integration is already configured in your organization, then the Inbound check box should be automatically selected. Make sure that the Inbound check box is selected. If you clear the Inbound check box, then the existing API Inbound integration may be removed.

      • If the Google Workspace Inline Inbound integration is already configured in your organization, then the Inbound check box should be cleared, and the check box should be disabled.

    2. Outbound:

      • Select Outbound.

        Note that the Outbound option appears only if outbound scanning is enabled, as described in Step 1 above.

  9. Click Next - to open the next step in the onboarding wizard.

  10. Select the domains and/or users that will be scanned.

    Important:

    • If inbound scanning uses Google Workspace API: The domains/users that you specify now will be applied to inbound, internal, and outbound scanning, and will override any previous configurations.

    • If incoming scanning uses Google Workspace Inline: You can select any domains/users to scan. This will apply to outbound scanning only, and will NOT affect inbound scanning.

  11. Click Next. A summary of the new email service will be displayed.

  12. Review the details, and then click Done.

Step 3: Confirming the connection

After you enable and configure the "outbound" functionality - as described above - you can verify that the outbound functionality is now active.

  1. In FortiMail Workspace Security - in the left navigation menu, select Settings > Bundles and Channels.

  2. Under Email Service > Google Workspace, verify that:

    1. Outbound email scanning is Enabled

    2. the Connection scope includes Outbound

    Important: If Outbound email scanning is not displayed as Enabled, refresh the page, and then recheck the Outbound email scanning status.

    When the outbound integration is correctly configured, scan results will appear in the Scans page in FortiMail Workspace Security. In the Scans page, you can click the Outbound email filter icon [] to show scan results for outbound email only.

See also: