Skip to main content

Whitelisting Guide (Google Workspace)

Let revel8 phishing simulations through Gmail with the IP allowlist, a spam filter exception and an inbound gateway setting.

ℹ️ Info
Part of the Getting Started guide, Step 2. Ensure deliverability.

Gmail can hold back or flag revel8 simulations as spam. This guide allows revel8's servers in three places in the Google Admin console: the IP allowlist, a spam filter exception, and an inbound gateway setting that removes Gmail's warning banners.

Before you begin

Have these ready:

  • A Google Workspace admin account for admin.google.com.

  • The revel8 values from Settings → Whitelisting (in Integrations): the entries under IP addresses and Email domains. Your revel8 contact can also send you the list.

⚠️ Warning
revel8 only sends from the email domains and IP addresses that are switched on in Settings → Whitelisting. After you add entries in Google Admin, switch on exactly those entries in revel8, and no others.

1. Add the revel8 IP addresses to the allowlist

  1. In the Google Admin console, open Apps → Google Workspace → Gmail.

  2. Open Spam, phishing and malware.

  3. Under Email allowlist, add all revel8 IP addresses, separated by commas.

  4. Click Save.

The Spam, phishing and malware settings in Google Admin with the revel8 IP addresses added

2. Create a spam filter exception

  1. In the same Spam, phishing and malware section, under Spam, click Edit (or Configure) and name the setting, for example revel8.

  2. Turn on:

    • Bypass spam filters for messages received from internal senders

    • Bypass spam filters for messages from senders or domains in selected lists

    • Bypass spam filters and hide warnings for messages from senders or domains in selected lists

  3. For each list option, click Create or edit list and add the revel8 IP addresses and email domains. Untick Authentication required (received mail only).

  4. Under the second option, bypass and hide warnings, choose Use existing list and select the same list.

  5. Click Save.

3. Remove Gmail's warning banners

Even when simulations reach the inbox, Gmail can show a warning banner like this one:

A Gmail warning banner shown above a simulated phishing email

  1. Still in Spam, phishing and malware, find Inbound gateway and click Edit.

  2. Configure the dialog:

    • Add the revel8 IP addresses under Gateway IPs.

    • Leave Reject all mail not from gateway IPs unticked.

    • Tick Require TLS for connections from the email gateways listed above.

    • Under Message tagging, enter any random string, for example kzndsfgklinjvsdnfioasmnfsmf.

    • Tick Disable Gmail spam evaluation on mail from this gateway; only use header value.

    The Inbound gateway dialog in Google Admin configured for revel8
  3. Click Save.

Check that it works

Send a test simulation to yourself. It should arrive in the inbox, not in spam, and without a warning banner.

Did this answer your question?