Ensure protection against spoofing of employee names is enabled

MediumLevel 1Manual reviewgoogle-workspace

Description

Moves employee spoofing emails to spam folder. You should protect your users from employee spoofing emails.

How it is checked

Audit method: Manual review

This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.

To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Gmail 5. Under Safety - Spoofing and authentication, ensure Protect against spoofing of employee names is checked 6. Ensure Action is Move email to spam

How it is fixed

Fix method: Guidance or infrastructure patch

To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Gmail 5. Under Safety - Spoofing and authentication, set Protect against spoofing of employee names to checked 6. Set Action to Move email to spam 7. Select Save

Properties

Operating systems: Any
Tags: google-workspacesaas
Reference: CIS Google Workspace Foundations Benchmark v1.4.0 - 3.1.3.4.3.2 Ensure protection against spoofing of employee names is enabled