# Configure Google Workspace Allowlist for Phishing Simulations

WatchDog Security Automated Phishing Campaigns simulate real phishing attacks to train users and identify risk.  

Google Workspace may block these emails by default, as they resemble real phishing attempts. To ensure successful delivery, you must configure an allowlist and optionally create a Content Compliance Policy.

## Configure Email Allowlist

:::info[]
This ensures phishing simulations are not blocked by Google spam filtering.
:::

<Steps>

<Step title="Open Google Admin">
  Navigate to [**Google Admin Console**](https://admin.google.com/)
</Step>

<Step title="Open Gmail Settings">
  Go to **Apps → Google Workspace → Gmail**.
</Step>

<Step title="Open Spam Settings">
  Select **Spam, Phishing and Malware**.
</Step>

<Step title="Add Whitelist IP">
  Enter `69.147.224.210` under **Email whitelist**.
</Step>

<Step title="Save Changes">
  Click **Save** to apply the allowlist.
</Step>

</Steps>

---

## Configure Content Compliance Policy (Optional)

:::tip[]
Only required if using WatchDog Email Security Firewall.
:::

<Steps>

<Step title="Open Google Admin">
  Navigate to [**Google Admin Console**](https://admin.google.com/)
</Step>

<Step title="Open Gmail Settings">
  Go to **Apps → Google Workspace → Gmail**.
</Step>

<Step title="Open Compliance Settings">
  Select **Compliance** then open **Content Compliance**.
</Step>

<Step title="Add New Rule">
  Click **Add** or **Add Another** to create a new rule.
</Step>

<Step title="Name The Rule">
  Enter **WatchDog Phishing Simulation Allowlist**.
</Step>

<Step title="Set Message Scope">
  Select **Inbound** under **Email messages to affect**.
</Step>

<Step title="Add Expression">
  Add **Metadata match** with **Source IP** set to `69.147.224.210`.
</Step>

<Step title="Add Header">
  Enable **Add custom headers** and set **X-CLOUD-SEC-AV-Info**.
</Step>

<Step title="Set Header Value">
  Enter **[portalname],google_mail,inline** replacing **[portalname]**.
</Step>

<Step title="Save Rule">
  Click **Save** to apply the policy.
</Step>

</Steps>


## What Happens Next

<TipInfo>Phishing simulation emails bypass Google Workspace spam filtering.</TipInfo>
<TipInfo>Users receive phishing simulations directly in their inbox.</TipInfo>
<TipInfo>Email delivery reliability improves for automated campaigns.</TipInfo>
<TipInfo>Campaign tracking reflects accurate user interaction.</TipInfo>


## Troubleshooting

<AccordionGroup>

<Accordion title="Phishing Emails Not Delivered" defaultOpen>
If emails are not reaching users:

- Verify **Email whitelist** includes the correct IP  
- Check spam or quarantine folders  
- Confirm Gmail security settings are not overriding rules  
</Accordion>

<Accordion title="Content Compliance Rule Not Working">
If the rule is not effective:

- Ensure the rule is **Enabled**  
- Verify **Source IP** is correct  
- Confirm header key and value are properly configured  
</Accordion>

<Accordion title="Cannot Access Google Admin Settings">
If you cannot configure settings:

- Ensure you have **Google Workspace Admin** permissions  
- Verify access to **Gmail settings** in Admin Console  
</Accordion>

<Accordion title="Emails Blocked by Third Party Tools">
If emails are still blocked:

- Check external email security tools  
- Add WatchDog IP and domains to additional allowlists  
</Accordion>

</AccordionGroup>