Create a Gmail Email Transport Rule

1. Configure the Email DLP data filtering settings.

   These settings determine the timeout and email message size parameters for emails forwarded to Enterprise DLP and specify the actions Enterprise DLP takes when these parameters are exceeded.
2. Log in to the Google Admin portal.
3. In the Dashboard, select AppsGoogle WorkspaceGmailCompliance.
4. In the Content compliance section, Add Another Rule.

5. Configure the email transport rule.

   1. In Content compliance, enter a descriptive name for the transport rule.
   2. For Email messages to affect, select Outbound.

      This instructs Gmail to forward the email to Enterprise DLP before it leaves your network when the email recipient is outside your organization.

   3. Configure email forwarding to Enterprise DLP for emails that have not been inspected.

      1. In Add experiences that describe the content you want to search for in each message, select If ALL of the following match the message.
      2. Add a condition to forward emails that haven't been inspected by Enterprise DLP.
         • In Add setting, select Advanced content match.
         • For Location, select Full Headers.
         • For Match type, select Not contains text.
         • For Content, enter x-panw-inspected.
         Click Save to continue.
      3. Add a condition to forward emails to Enterprise DLP when the sender is blank or empty.
         • In Add setting, select Advanced content match.
         • For Location, select Envelope Sender.
         • For Match type, select Not matches regex.
         • For Regexp, enter ^$.
         Click Save to continue.
      4. Save.

   4. Configure the action Gmail takes for emails that have already been inspected by Enterprise DLP, and the encryption settings.

      1. In If the above expressions match, do the following, enable Change Route.
      2. Select the Email DLP Host you created.
      3. For Encryption (onward delivery only), select Require secure transport (TLS).

   5. Configure the types of Gmail accounts the transport rule affects.

      1. Show Options.
         After you expand the options menu, the button displays Hide Options.
      2. In Account types to affect, select Users, Groups, and Unrecognized / Catch-all.

   6. Save.
6. Verify that the email transport rule was successfully added and that the Status is Enabled.