Set up Email Security with Google Workspace in OneView

Email Security in OneView helps protect organizations from phishing, malware, and other email-based threats. This article guides you through the setup process, from connecting your email provider to enabling advanced protection features.

To get started, go to Manage > Email Security. Select a site from the drop-down list with the Pending configuration warning and click Begin Email Integration. If the selected site does not have the Email Security subscription, click Manage Subscription and add it.

Before you begin

• Be a Google Workspace Super Admin and OneView Global Administrator.
• Have a list of email domains  to protect.
• Have a business email address to receive setup confirmation.
• The Data Residency Region must be selected by a Global Administrator.

Step 1: Connect email provider

1. Click Begin Email Integration.
2. Click Next.
3. Select Google Workspace as the email provider.
4. Enter the email domains to protect. More domains can be added later from the Configurations > Domains page.
5. Select the region to store and process email data based on your compliance requirements. The data center options are the United States (US) or European Union (EU).
6. Enter the Google Workspace email address with Super Admin permissions.
   • This mailbox must belong to one of the protected domains listed above and be a business email.
   • A confirmation email is sent to this address when setup is complete.
7. Click Authorize.
8. A Google Admin Center tab pops up with the Client ID and API details filled out. Click Authorize.
9. Return to the OneView tab and click Enable API.

Note: If you made a typo and are receiving error messages when trying to set up the correct email domain, contact Support.

Step 2: Choose a protection mode

Choose how Email Security should manage email threats and click Next:

Change this setting later from the Configurations > Protection Mode page.

Step 3: Select mailboxes to protect

In Google Workspace, organize each mailbox into mailbox groups to make bulk management easier. Choose which mailbox groups to sync with OneView and click Next. Any changes made to the selected mailbox groups in Google Workspace are automatically reflected in OneView. 

For example, when an employee is offboarded, they should be removed from the mailbox group in Google Workspace. This automatically removes the mailbox from Email Security in OneView as well.

• All mailboxes in domain(s) – Protects all mailboxes under the selected domains. If your mailboxes are not organized into mailbox groups or you're unfamiliar with how the mailbox groups are configured, select all mailboxes and disable individual mailboxes from the Configurations > Mailboxes page.
• Mailbox groups – Choose specific mailbox groups to protect.
  • Check Include shared mailboxes to protect those as well.

The mailbox group selections can be changed later from the Configurations > Mailboxes page. 

Step 4: Review and complete setup

1. Review the:
   • Email domains
   • Protection mode
   • Selected mailbox groups
2. Click Complete Setup.

Mailbox syncing starts immediately and may take up to 24 hours. A confirmation email is sent to the email address entered in step 1 once the sync is complete.

Next steps

To enhance the site's protection, we recommend the following: 

• Set Up a Report Phishing Mailbox: Allow users to report suspicious emails. These reported emails appear in the Email Incidents > Needs Attention tab for admin review. See Set up Report Phishing with Email Security in OneView.
• Enable Email Security Notifications: Notify admins when users report phishing emails or request quarantined emails to be released back to their mailbox. See Set up Email Security notifications in OneView.

Return to Email Security guide.