Email Security in Nebula helps protect your organization from phishing, malware, and other email-based threats. This article guides you through the setup process, from connecting your email provider to enabling advanced protection features.
Before you begin
- Be a Google Workspace and Nebula Super Admin.
- Have a list of email domains to protect.
- Have a business email address to receive setup confirmation.
Step 1: Connect your email provider
Enter your email domain details and authorize Nebula to connect with Google Workspace.
- In Nebula, go to Manage > Email Security and click Set Up Email Security.
- Select Google Workspace as the email provider.
- Enter the email domains to protect. An email domain is the part that comes after the @ in an email address. More domains can be added later from the Configurations > Domains page.
- Select the region to store and process email data based on your compliance requirements. The data center options are the United States (Oregon) or European Union (Germany).
- Enter the Google Workspace email address with Super Admin permissions.
- This mailbox must belong to one of the protected domains listed above and be a business email.
- A confirmation email is sent to this address when setup is complete.
- Click Authorize.
- A Google Admin Center tab pops up with the Client ID and API details filled out. Click Authorize.
- Return to the Nebula tab and click Enable API.
Note: If you made a typo and are receiving error messages when trying to set up the correct email domain, contact Support.
Step 2: Choose a protection mode
Choose how Email Security should manage email threats and click Next:
| Mode | Description |
|---|---|
| Active Mode (Recommended) | Automatically detects and removes malicious emails in real time. |
| Silent Mode |
Detects and logs threats only. No malicious emails are automatically quarantined. Email Security trials are restricted to Silent mode. After upgrading to a paid subscription, an admin must manually change it to Active mode to begin protecting mailboxes. |
Change this setting later from the Configurations > Protection Mode page.
Step 3: Select mailboxes to protect
In Google Workspace, organize each mailbox into mailbox groups to make bulk management easier. Choose which mailbox groups to sync with Nebula and click Next. Any changes made to the selected mailbox groups in Google Workspace are automatically reflected in Nebula.
For example, when an employee is offboarded, they should be removed from the mailbox group in Google Workspace. This automatically removes the mailbox from Email Security in Nebula as well.
- All mailboxes in domain(s) – Protects all mailboxes under the selected domains. If your mailboxes are not organized into mailbox groups or you're unfamiliar with how the mailbox groups are configured, select all mailboxes and disable individual mailboxes from the Configurations > Mailboxes page.
-
Mailbox groups – Choose specific mailbox groups to protect.
- Check Include shared mailboxes to protect those as well.
The mailbox group selections can be changed later from the Configurations > Mailboxes page.
Step 4: Review and complete setup
- Review the:
- Email domains
- Protection mode
- Selected mailbox groups
- Click Complete Setup.
Mailbox syncing starts immediately and may take up to 24 hours. A confirmation email is sent to the email address entered in step 1 once the sync is complete.
Next steps
To enhance your protection, we recommend the following:
- Set Up a Report Phishing Mailbox: Allow users to report suspicious emails. These reported emails appear in the Email Incidents > Needs Attention tab for admin review. See Set up Report Phishing with Email Security.
- Enable Email Security Notifications: Notify admins when users report phishing emails or request quarantined emails to be released back to their mailbox. See Set up Email Security notifications.
Return to Email Security guide.