Setting up Paubox Encrypted Email for G Suite (Google Apps) contains two parts: Changing DNS records and Setting up Inbound and Outbound encryption.
Part I: Changing DNS Records for G Suite (Google Apps)
G Suite (Google Apps) asks that you setup your MX records so that they look similar to these:
MX 1 aspmx.l.google.com.
MX 5 alt2.aspmx.l.google.com.
MX 5 alt1.aspmx.l.google.com.
MX 10 alt4.aspmx.l.google.com.
MX 10 alt3.aspmx.l.google.com.
To get Paubox Inbound Security going, you’ll need to make two changes to your domain’s DNS records. First, change your MX record so that it has just one MX record. To change the MX record, figure out who your domain name host is and then update your domain host records.
The only MX record you want to have for your domain name is: mx2.paubox.com
Second, change your TXT record so that it’s set to:
v=spf1 include:_spf.paubox.com include:_spf.google.com -all
Before making these changes however, make sure we have verified that you are correctly setup on our end first. Click here to get started.
Part II: Setting up Inbound & Outbound Encryption for G Suite (Google Apps)
You will need to use the Google Admin Console to configure your inbound and outbound email to go through Paubox. Here’s how you do it:
- Go to the Google Admin Console
- Click the Apps icon
- Click on the G Suite box.
- Click on the Gmail icon.
- On the following screen, scroll down to the bottom of the screen and click on Advanced settings >>.
- Type Inbound gateway in the Search settings bar.
- Hover over Inbound gateway and click the Configure button on the right.
- Click the Add button and enter this subnet range: 18.104.22.168/16
- Click Save
- Check the box for Require TLS for connections from the email gateways listed above.
- Click ADD SETTING.
- Type Outbound gateway in the Search settings bar.
- Type the following under Route outgoing emails to the following SMTP server: outbound.paubox.com
- Click the SAVE button at the bottom right corner of the screen.