TMAegisBeta
More rules for google-workspace

Google Workspace

TMA-GWS-3.1.3.5.4

Ensure external recipient warnings are enabled

MediumLevel 1Manual reviewgoogle-workspace

Description

Gmail adds an image or colored border to external addresses. As an admin for your organization, you can turn alerts on or off for messages that include external recipients (people with email addresses outside of your organization). These alerts help people avoid unintentional replies, and remind them to treat external messages with caution.

How it is checked

Audit method: Manual review

This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.

To verify Ensure external recipient warnings are enabled, use the Google Workspace Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Gmail 5. Select End User Access 6. Under Warn for external recipients, ensure Highlight any external recipients in a conversation. Warn users before they reply to email with external recipients who aren't in their contacts. is ON

How it is fixed

Fix method: Guidance or infrastructure patch

To configure external recipient warnings are enabled, use the Google Workspace Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Gmail 5. Select End User Access 6. Select Warn for external recipients 7. Set Highlight any external recipients in a conversation. Warn users before they reply to email with external recipients who aren't in their contacts. to checked 8. Select Save

Properties

Operating systems
Any
Tags
google-workspacesaas
Reference
CIS Google Workspace Foundations Benchmark v1.4.0 - 3.1.3.5.4 Ensure external recipient warnings are enabled