Ensure spam filters are not bypased for internal senders

СреднийУровень 1Ручная проверкаgoogle-workspace

Описание

You can configure your advanced Gmail settings to bypass, or not bypass, spam filters for messages received from internal senders. Turning off this setting reduces the risk of spoofing and phishing/whaling.

Как проверяется

Метод проверки: Ручная проверка

Эту рекомендацию нельзя проверить автоматически. Сканирование выводит её вместе с этими инструкциями при указании флага --include-manual.

To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Gmail 5. Select Spam, phishing, and malware 6. Under Spam, select Configure 7. Ensure Bypass spam filters for messages received from internal senders. is unchecked

Как исправляется

Метод исправления: Рекомендация или патч инфраструктуры

To configure this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Gmail 5. Select Spam, phishing, and malware 6. Under Spam, select Configure 7. Set Bypass spam filters for messages received from internal senders. to unchecked 8. Select Save

Свойства

Операционные системы: Любая
Теги: google-workspacesaas
Источник: CIS Google Workspace Foundations Benchmark v1.4.0 - 3.1.3.6.2 Ensure spam filters are not bypased for internal senders