Step 1: Selecting the “Journal” Architecture
Log into the Trustifi web portal as an admin and navigate to the Email Flow Integrations page.(Inbound management . Plan Settings > Email Flow Integrations)
In the “Email Flow Integrations” tab, click on the “Via Journal” setting.
You will also need to confirm this change in a pop-up.
.png)
Step 2: Copying the journaling address
After the architecture change has been confirmed, Trustifi will generate a unique journaling address that will be used to receive the journaled traffic.
Click on the copy icon next to this address to copy it, as you will be using it during the journaling rule configuration in Google.
Step 3: Creating a content compliance rule in Google Workspaces
First, sign into the Google Admin Portal with your global admin credentials.
Then, navigate to the Compliance page and scroll down to the “Content Compliance” section. There, create a new rule.
Step 4: Naming the rule
Enter a descriptive name for your compliance rule, such as 'Trustifi Inbound Journal' or a similar name that identifies its purpose.
Step 5: Email messages to affect
Select which types of messages should be journaled to Trustifi. You will need to select the “Inbound” checkbox, and you can also choose to journal internal inbound traffic by selecting “Internal – Receiving“.
Step 6: Adding an expression
Here you will need to add an expression that, when matched, emails will be journaled to Trustifi. Follow the instructions below.
First, select “If ALL of the following match the message” and click “Add“.
In the pop-up, configure these settings:
1. Select “Advanced content match“
2. Under “Location“, select “Full headers“
3. Under “Match type“, select “Not matches regex“
4. Add this regex (without the quote marks) – “^Received[:].+(3[.]93[.]139[.]220|3[.]93[.]243[.]176|3[.]251[.]32[.]127|54[.]195[.]145[.]1)”
5. Under "Regex Description", add a note such as "Trustifi Inbound Shield IP" or something similar to help identify this condition later.
6. Click “Save“
Step 7: Add journaling recipient
Scroll down to the “Also deliver to” section and select the box for “Add more recipients“. Then, click on the “Add” link to add a journaling recipient.
Step 8: Configure journaling recipient
First, change the setting configuration to “Advanced“.
In the “Advanced” section, select the “Change envelope recipient” box and paste the Trustifi journaling address you’ve copied before in the “Replace recipient” input field.
Scroll down to the “Spam and deliver options” section and uncheck the box for “Do not deliver spam to this recipient“. Then, click on “Save” at the bottom right corner.
Step 9: Saving the compliance rule
Click on “Save” once again at the bottom right to save the compliance rule.
Once the compliance rule is saved and enabled, your inbound traffic should be journaled and scanned in Trustifi.
Enabling the Google Workspaces API integration
To perform additional security actions, like sending emails to quarantine and releasing them back to user mailboxes, you will need to also enable the Google Workspaces API integration from Trustifi.
Follow the steps below to enable this API integration.
Step 10: Navigating to the integrations page
Navigate to the Trustifi Inbound Integrations page.
Here you can find the integration status in the “Exchange/Google API Integrations” section, and click on the Google Workspace icon.
From here, you can follow the instructions in this guide to connect the Google API integration