Google G Suite Integration

Google G Suite Integration


If your organization uses Google's G Suite for your email hosting, you can easily add our Fast&Secure encryption service by changing the advanced Gmail settings on your account. First, you will set up a Fast&Secure 'mail route', then set up rules to route all outbound mail to our service. You should also route any inbound encrypted emails through our service, and we will decrypt and route them back to G Suite for you.

Add Fast&Secure Mail Route for Your Domain

  1. Sign in to your Google Admin console.

  2. From the Admin console Home page, go to Appsand thenG Suiteand thenGmailand thenAdvanced settings.  Tip: To see Advanced settings, scroll to the bottom of the Gmail page.

  3. Click Hosts.

  4. Click Add Route.
  5. Enter a route name 'Globalcerts'
  6. Specify any email servers for the route. Select Single host and enter the host name 'gc.fastandsecure.net', and port number 25.

  7. Select the following options you want to require:

    1. Require TLS delivery—Encrypt messages between sending mail servers and receiving mail servers using Secure Sockets Layer/Transport Layer Security (SSL/TLS).

    2. Require CA signed certificate—Require the certificate for the mail route.

  8. At the bottom, click Save.

  9. It can take up to an hour for changes to propagate through the system. You can track changes in the Admin console audit log.

Setting Up Mail Outbound Mail Routing

  1. Scroll to the Routing setting. In the Routing section, point to the setting, and click Configure.

  2. Enter a unique name that'll help you identify the setting. (ex. 'Outbound Encryption')

  3. Apply the setting to: Outbound 

  4. If you would like to restrict service to only certain senders, you can check the "Only affect specific envelope senders box" and enter the sender or a group you previously defined.

  5. Specify what happens to the message: Choose "Modify Message":

    1. Select Change route.
    2. Select the 'Globalcerts' server you defined earlier from the list.
    3. Scroll down and click Save.

  6. Click Add setting. Any new settings are added to the Gmail Advanced settings page.

  7. At the bottom, make sure to click Save.


Setting up Inbound Routing (Optional)

You will want to set up inbound routing so that GlobalCerts can de-crypt any encrypted message you receive from other GlobalCerts customers, or organizations using your S/MIME certificates. Here, we will set up a route and a routing rule to relay any inbound mail with an encrypted attachment (smime.p7m) to our service for decryption. You can set this up similar to the outbound setting above:
  1. From the Admin console Home page, go to Appsand thenG Suiteand thenGmailand thenAdvanced settings.

    Tip: To see Advanced settings, scroll to the bottom of the Gmail page.

  2. Scroll to the Attachment compliance setting in the Compliance section, hover over the setting, and click Configure. If the setting is already configured, hover over the setting and click Edit or Add another.
  3. In the pop-up, give the setting a name like 'Inbound SMIME'
  4. check the 'Inbound' checkbox.
  5. In step (2), define the custom attachment types: 'p7m, p7s' (these are for S/MIME signed or encrypted emails)


  6. In step (3), select 'Modify message' and check 'Change route' checkbox and select the 'Globalcerts' route you created earlier.
  7. Save the setting by clicking 'ADD SETTING'
For more information on routing based on attachment type: https://support.google.com/a/answer/2364580
Important Notes:
Make sure to click 'Save' at the bottom right once done with all setting modifications!
Settings can take up to 1 hour to take effect.

White-listing Our Service on G Suite (Optional)

If you have configured inbound routing through Fast&Secure and you're experiencing sporadic delivery issues on inbound mail or rate-limiting, it may be because the inbound emails sent through our service are marked as suspicious or spam by Google. This is because Google is trying to perform spam and virus checks on the emails like SPF checks, but it is seeing our servers as the original sender of the email. To ensure that emails received from our service make it through, you can let Google know that we are acting as an inbound gateway for your domain(s):
  1. Under the G Suite -> Gmail -> Advanced Settings, go to the 'General Settings' Tab.
  2. Go down to 'Spam' Section, and go to 'Inbound gateway' and click the 'Configure' button on the right.
  3. Give a name like 'Globalcerts' and then add the IP addresses: 104.42.121.228, 20.55.195.8, and click the checkbox to enforce TLS.
  4. Save the setting by clicking 'ADD SETTING'
For more information on using inbound gateways like Fast&Secure with G Suite:

As always, if you require assistance or troubleshooting please feel free to contact GlobalCerts Support at support@globalcerts.net!

    • Related Articles

    • Accessing your Fast&Secure Email

      By partnering with Microsoft as a Cloud Solution Provider(CSP), GlobalCerts is able to offer our SMB customers enterprise class email hosting through Microsoft Office 365. Below you will find the settings needed to access your mailbox through your ...