Allow Arsen simulation emails to reach inboxes successfully

Prevent simulations from being flagged as spam

Reduce visual warnings that could artificially influence employee behavior

Ensure realistic and representative phishing awareness training

Administrator access to the Google Workspace / Google Apps Admin Console

Ability to modify Gmail settings at the organization level

Log in to https://admin.google.com

Click Apps

Click Google Workspace

Select Gmail

Open Spam, phishing, and malware
​(or Advanced Settings depending on your interface)

In the left column, select your primary domain

In Email whitelist, enter:

Click Save

Select your Organizational Unit

Click Inbound Gateway

Check Enable

Click Add

Enter:

Click Save

Check Require TLS for connections from the listed mail gateways

Check Message is considered spam if the header matches the following regex

Enter an arbitrary value, for example:

Select Message is spam if the regex matches…

Then check:

Click Save