Inline Configuration (Gmail)
(Changing MX Record)

You will need to change the MX record of your domain to Perception Point’s servers (effectively to Amazon SES). Inbound mail to this domain will first be received by Perception Point, following this, it will be delivered to the next mail relay (i.e. Gmail)

Follow these steps to accomplish this setup:

1.Provide Perception Point with these details:

  1. Domain Name (i.e. customer.com)
  2. Original MX record for this domain (i.e. aspmx.l.google.com)

2. Verify domain against Amazon SES

  1. Create a TXT domain verification record with the value provided by Perception Point in your settings section. Use the values under “TXT Record Name” and “TXT Record Value”.
    This configuration should be done in the domain provider management dashboard.
  2. In your accounts’ settings section go to → TXT Record Verification → <press “verify” on the right side>
  3. Note: It might take up to 72 hours until your domain is verified, repeat until it says “Verified”. Do not proceed with the setup until this step is done.
     

    Your account settings should look like this:

    3. Whitelist Perception Point IP’s as trusted sender, follow these steps in G suite:

    1. Google Admin Console → Apps → G suite → Gmail → <press “Advanced settings” at the bottom>
    2. Under “General Settings” scroll down to the “Spam” section → Inbound gateway → <press “CONFIGURE” on the right side>
    3. Add the following IPs and press “ADD SETTING” when done:
      1. 34.230.185.136
      2. 34.199.131.247
    4. Press “Save” at the bottom right of the page
    5. 4. Verify that your mail server accepts mail sent by Perception Point

      1. Login to your accounts’ settings section → Trusted Sender Verification → <press “verify” on the right side>
      2. In the popup window enter an email address you own within the configured organizational domain
      3. An email should arrive in your inbox, copy the verification code and paste it in the popup
      4. Note: it might take some time until previous steps will take action, therefore you might need to repeat this step several times. Do not processed before this step is done.

        This is how your settings section should look like after this step

    4. Change MX record of the domain to Amazon SES address

    1. Login to your domain management dashboard and change the existing MX record to:
      inbound-smtp.us-east-1.amazonaws.com

    5. Verify that your inbound emails are routed through Perception Point’s advanced mail protection service

    1. Login to your accounts’ settings section → Routing Verification → <press “verify” on the right side>
    2. In the popup window enter an email address you own within the configured organizational domain
    3. An email should arrive in your inbox, copy the verification code and paste it in the popup
    4. Note: it might take some time until previous steps will take action, therefore you might need to repeat this step several times. When this step is done, all your emails are routed through Perception Point’s server. You can double check it if you look at the SMTP headers of newly received emails you should find “X-PERCEPTION-POINT-VERDICT”.

    6. (Optional) Add quarantine rule for malicious mails:

    1. Google Admin Console → Apps → G suite → Gmail → <press “Advanced settings” at the bottom>
    2. Under “General Settings” scroll down to the “Content compliance” setting and press “CONFIGURE” or “ADD ANOTHER” at the right.
    3. Add a meaningful name like: “PerceptionPoint Quarantine Rule”
    4. Mark “Inbound” and “Internal – receiving”
    5. Choose “If ALL of the following match the message”
    6. Under “Expressions” press “ADD”
      1. Choose “Advanced content match”
      2. Location: Full headers
      3. Match type: Equals
      4. Content: “X-PERCEPTION-POINT-VERDICT: MAL” (without quotes)
      5. SAVE
    7. Under “If the above expressions match, do the following” choose “Quarantine message”
    8. Press “Save”
    9. Press “Save” again on the main settings window at the bottom