Ensure spam filters are not bypased for internal senders

MediumLevel 1Manual reviewgoogle-workspace

Description

You can configure your advanced Gmail settings to bypass, or not bypass, spam filters for messages received from internal senders. Turning off this setting reduces the risk of spoofing and phishing/whaling.

How it is checked

Audit method: Manual review

This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.

To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Gmail 5. Select Spam, phishing, and malware 6. Under Spam, select Configure 7. Ensure Bypass spam filters for messages received from internal senders. is unchecked

How it is fixed

Fix method: Guidance or infrastructure patch

To configure this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Gmail 5. Select Spam, phishing, and malware 6. Under Spam, select Configure 7. Set Bypass spam filters for messages received from internal senders. to unchecked 8. Select Save

Properties

Operating systems: Any
Tags: google-workspacesaas
Reference: CIS Google Workspace Foundations Benchmark v1.4.0 - 3.1.3.6.2 Ensure spam filters are not bypased for internal senders