This procedure explains how to create an allow list of Arsen attack domains in Google Workspace and remove spam warning banners from employees’ inboxes.
1 - Objectives
Create an allow list for Arsen sender domains and email addresses.
Prevent spam warning banners on phishing simulation emails.
Ensure realistic email delivery even when using an upstream security filter.
Standardize configuration to minimize future adjustments.
2 - Prerequisites
Admin access to Google Workspace / Google Apps.
Use of an external filtering solution upstream of Gmail.
Ability to access Gmail spam, phishing, and malware settings in the Admin console.
3 - Access spam, phishing, and malware management rules
To begin:
Sign in to the Google Workspace Admin Console.
Go to
Apps.Click
Overview.Open
Google Workspace.Select
Spam, Phishing, Malware.
4 - Build the allow list of emails or domains
4.1 - Gather domains or sender addresses
Identify the Arsen attack domains or sender addresses used in your simulations.
Arsen provides a list of all phishing domains.
4.2 - Create the rule
Name the rule, for example Arsen custom rules.
Check the following options:
Bypass spam filters for internal senders
Bypass spam filters for messages from senders or domains in selected lists
Bypass spam filters and hide warnings for messages from senders or domains in selected lists
4.3 - Create the associated list
Click
CreateorEdit list.Add the Arsen sender addresses or domains.
Click Add, name the list (ex. Arsen domains), and click Save list.
5 - Apply the rules
After saving the list:
Select the newly created list.
Add it to both rules:
Bypass spam filters and hide warnings for messages from senders or domains in selected lists
Bypass spam filters for messages from senders or domains in selected lists
Click Save.
The allow list is now active and visible in Gmail’s spam settings panel.
