Google Workspace
TMA-GWS-3.1.3.6.2
Ensure spam filters are not bypased for internal senders
Descrição
You can configure your advanced Gmail settings to bypass, or not bypass, spam filters for messages received from internal senders. Turning off this setting reduces the risk of spoofing and phishing/whaling.
Como é verificado
Método de auditoria: Revisão manual
To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Gmail 5. Select Spam, phishing, and malware 6. Under Spam, select Configure 7. Ensure Bypass spam filters for messages received from internal senders. is unchecked
Como é corrigido
Método de correção: Orientação ou patch de infraestrutura
To configure this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Gmail 5. Select Spam, phishing, and malware 6. Under Spam, select Configure 7. Set Bypass spam filters for messages received from internal senders. to unchecked 8. Select Save
Propriedades
- Sistemas operacionais
- Qualquer
- Tags
- google-workspacesaas
- Referência
- CIS Google Workspace Foundations Benchmark v1.4.0 - 3.1.3.6.2 Ensure spam filters are not bypased for internal senders