• Home
• DLP
• DLP For Emails
• Guide miniOrange Email DLP with Gmail

Configure miniOrange Email DLP for Gmail and Google Workspace

---

In today's digital age, securing sensitive information is crucial for any organization. With the increasing reliance on email communication, especially through platforms like Gmail and Google Workspace (G Suite), protecting against unauthorized data transmission is more important than ever. miniOrange Email DLP (Data Loss Prevention) offers a robust solution to monitor outbound emails, manage quarantined emails, and establish rules to detect and prevent unauthorized data transmission. By integrating miniOrange Email DLP with Gmail and Google Workspace, organizations ensure comprehensive email security, safeguard valuable data, and maintain regulatory compliance.

Prerequisites

There are a couple of things you need to check before you start with the setup:

• You need Administrator access for Google Admin Console.
• Access to the Server / Instance where miniOrange Email DLP is installed.

Step 1: Add an Outbound gateway route

• Sign in to your Google Admin console.
  
• In the Admin console, navigate to the left menu panel and then click on Apps > Google Workspace > Gmail.




• In the Gmail tab navigate to Hosts and click on Add Route.




• For Name, enter a route name for the outbound gateway, and for Enter hostname or IP, enter the outbound gateway IP address.




• Disable the TLS option and then click on Save.

Step 2: Set up the Outbound gateway route in Gmail

You can set up an outbound gateway using the Routing setting or the Outbound gateway setting.

• In the Admin console, go to Menu and then Apps > Google Workspace > Gmail > Routing.
• Make sure your top-level organizational unit is selected.
• For setting the Routing click on Configure or Add another rule option.




• Enter a name or description for the routing setting and check the Outbound box option for email messages to affect.




• For the above types of messages, select the checked Modify message and check the Change route box for Route.




• Click on Normal routing, then select your outbound gateway route from the list and click on Save.





Note : You have successfully configured Google-workspace but changes may take up to 24 hours to process, although they usually occur more quickly.

3. Configure Email Policy using DLP Solution.

• Sign in to your DLP dashboard.
• On the dashboard, navigate to Email Policy and click on the Add Policy button to open the policy form.



• Now under the General tab, provide a meaningful Policy Name.




• Then select an Action for the policy from the dropdown.
• Block: If the email violates the policy, it will be blocked, and a report will be generated.
• Log: If the email violates the policy, it will be sent, but the incident will be logged in the reports.
• Quarantine: If the email violates the policy, it will be quarantined for review and the reviewer will be notified over email.




• Now choose the appropriate Risk level.




• Click on Next to proceed to the Restriction tab where Domain and attachment-based restrictions can be set.
• Select the type of Domain Restriction you want to apply.
• No Restriction: No restrictions will be applied.
• Allow Domains (Whitelisting): Emails can only be sent to whitelisted domains, while all others are blocked.
• Block Domains (Blacklisting): Emails to blacklisted domains will be blocked, with all other domains allowed.




• For example, if we select the Allow Domains option, we need to specify a domain list to which all the emails will be sent.




• In the next step, you can set restrictions on file uploads based on their attachements.
• To allow all file types, select the No Restriction option.
• If you want to permit only specific file types, choose Allow Attachements and then select the desired attachement from the list.
• Alternatively, if you wish to block certain file types, select Block Attachements and choose the attachement to be restricted.




• For example, we have selected the Allow Attachments option to allow specified file types to be sent as email attachments.




• Proceed to the Classification tab to specify the type of data that needs to be sent over email.
• Email Body: Select this option to apply classification to the email body.
• Email Subject: Select this option to apply classification to the email subject.
• Attachments: Select this option to apply classification to the attachments.




• For example, we have applied classifications to all the three options.

Note: Classifications can be created under the Data Classifications > Classifications option.





• In the next step, you'll associate groups with the policy. Start by searching for the User Groups and selecting it. If you want to apply the same policy to multiple groups, you can select additional groups as well.



• Finally, click on the Add button to save the policy.
• You have successfully configured the miniOrange Email DLP dashboard and implemented your email policies.

If you are facing any issues that you are not able to resolve please feel to reach out us dlpsupport@xecurify.com