Before you start
If you haven't already, be sure to complete all steps in the Prerequisites to enable EchoMark for Google Workspace. The rule created in this guide will initiate marking for messages and attached PDFs sent from members of the group specified below. If you want to enable marking for your entire organization, select a group that contains everyone in your org.
Important
Be sure to complete all steps below, paying particular attention to the final step before saving. This step ensures that EchoMark will only affect mail sent from the addresses in the group specified.
Set up a Content Compliance Rule
- Go to the Compliance page of your Workspace Admin console.
- Then scroll to the section called Content compliance and click Add rule. Then, in the dialog that appears.
- Set the following properties:
Name Outbound to EchoMark Outbound Checked Enables marking for messages sent outside of your org Internal - Sending Checked Enables marking for messages sent within your org If ANY of the... If ALL of the following... Only marks if all expressions are satisfied - Under Expressions, press Add.
- In the Add setting dialog that appears, click the Simple content match dropdown and choose Advanced content match. Then set the following fields, being sure to replace @domain1.com, @domain2.com, etc with your organization's domains:
Location Send header Match type Matches regex Regexp /^(@domain1.com|@domain2.com|@domainN.com)$/ Optional description Scopes marking to your domains - Press Save on the Add setting dialog.
- Under Expressions, press Add again.
- In the Add setting dialog that appears, click the Simple content match dropdown and choose Advanced content match. Then Set the following fields:
Location Full headers Match type Not matches regex Regexp x-personalized-for: recipient Optional description Prevents excess marking - Press Save on the Add setting dialog.
- Click Add to create another expression.
- In the Add setting dialog that appears, click the Simple content match dropdown and choose Advanced content match. Then Set the following fields:
Location Sender header Match type Not matches regex Regexp @google.com\b Optional description Prevents internal google operations from marking - Press Save on the Add setting dialog.
- In the section titled, 3. If the above expressions match, do the following, select Change route and choose the outbound route you set up earlier.
- At the bottom of the dialog, select Require secure transport (TLS)
- To limit EchoMarking to messages sent from addresses within a Workspace group, scroll to the bottom of the dialog and press Show Options. Then under C. Envelope filter, select Only affect specific envelope senders. You can then choose to affect an entire group, or a single sender. In the example below, only mail sent from info@acme.co will be EchoMarked.
- Press Save