Create a Gmail Encrypt Transport Rule

Log in to the Google Admin portal.

In the Dashboard, select

Apps

Google Workspace

Gmail

Compliance

.

In the Content compliance section,

Add Another Rule

.

Configure the email transport rule.

In the
Content compliance
field, enter a descriptive name for the transport rule.
For the
Email messages to affect
, select
Outbound
.
This instructs Gmail to forward the email to
Enterprise DLP
before it leaves your network when the email recipient is outside your organization.
Configure email forwarding to
Enterprise DLP
for emails that have not been inspected.
In the
Add experiences that describe the content you want to search for in each message
section, select
If ANY of the following match the message
.
Add
.
In the
Add setting
page, select
Advanced content match
.
For the
Location
, select
Full Headers
.
For the
Match type
, select
Contains text
.
For the
Content
, enter
x-panw-action: encrypt
.
Save
.
Configure the action Gmail takes for encrypted emails.
In the
If the above expressions match, do the following
section, select
Modify message
.
For the
Subject
, select
Modify message
.
For the
Headers
, select
Add customer headers
Add
the custom message header.
For the
Header key
, enter
x-proof-pointencryptdesktop
.
For the
Header value
, enter
encrypt
.
Save
to continue.
Configure the route to forward emails to your Proofpoint server for encryption.
In the
Route
section, select
Change route
.
Select the Proofpoint server route you created.
Save
.

Verify that the email transport rule was successfully added and that the

Status

is

Enabled

.