Ensure spam filters are not bypased for internal senders

MoyenneNiveau 1Revue manuellegoogle-workspace

Description

You can configure your advanced Gmail settings to bypass, or not bypass, spam filters for messages received from internal senders. Turning off this setting reduces the risk of spoofing and phishing/whaling.

Méthode de vérification

Méthode d'audit: Revue manuelle

Cette recommandation ne peut pas être vérifiée automatiquement. Une analyse la liste avec ces instructions lorsque vous passez --include-manual.

To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Gmail 5. Select Spam, phishing, and malware 6. Under Spam, select Configure 7. Ensure Bypass spam filters for messages received from internal senders. is unchecked

Méthode de correction

Méthode de correction: Recommandation ou correctif d'infrastructure

To configure this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Gmail 5. Select Spam, phishing, and malware 6. Under Spam, select Configure 7. Set Bypass spam filters for messages received from internal senders. to unchecked 8. Select Save

Propriétés

Systèmes d'exploitation: Tous
Étiquettes: google-workspacesaas
Référence: CIS Google Workspace Foundations Benchmark v1.4.0 - 3.1.3.6.2 Ensure spam filters are not bypased for internal senders