View source for Block Personal Gmail, Allow Google Corporate Accounts


= Overview =

Nowadays emails are used very frequently to exchange information between people using electronic devices. In some organization&nbsp;personal emails in the office network are not allowed. Personal emails are blocked&nbsp;to avoid spending of&nbsp;productive time by employees. Allowing personal emails can also lead a path for leakage of&nbsp;confidential information. Nowadays&nbsp;some of the oragnization&nbsp;emails are via Google Corporate domains. [https://gsuite.google.co.in/intl/en_in/products/gmail/ Google corporate account] allows organization to have their mailing server along with the additional Gmail features personalized for the organization with complete control. So, we currently cannot block Gmail.

= Client Scenario =

As an administrator, you may want to prevent users from signing into Google services using any accounts other than the account you provided them with. You&nbsp;do&nbsp;not want users to waste their productive time in other unnecessary mail exchanges&nbsp;in the&nbsp;office network. For example, you may not want users&nbsp;to use their personal Gmail accounts or manage&nbsp;Google Account from another domain. Block Personal Gmail To Ensure Data Security.

SafeSquid Secure Web Gateway(SWG) allows you to access corporate account only and block personal gmail account.

= Policy Creation =

To solve problem of personal Gmail blocking. We need to [https://support.google.com/a/answer/1668854?hl=en manipulate headers of Gmail] so that only specific domain (corporate domains) is/are allowed and rest are denied (this includes personal Gmail). Also as Gmail is HTTPS website, we need to make sure [[Configure_HTTPS_Inspection|HTTPS Inspection is enabled]].

We can achieve the above by following steps –

== <span id="Step1">Enable policy from&nbsp;Policies and Profiles Section</span> ==

We will first match request from only Google Application policy.

*From SafeSquid Dashboard click on Configure page at the Top Right Corner. You will see&nbsp;&nbsp;[[Access_Profiles|Policies and profiles]] section on your screen. 
*Search for default profile named&nbsp;''GOOGLE APPLICATION''.<br/> [[File:Google Corporate 1.png|Google Corporate 1.png|link=]] 
*Edit and Enable this&nbsp;policy<br/> [[File:Google Corporate 2.png|Google Corporate 2.png|link=]] 

'''Note&nbsp;'''''':''' You can also add User Groups in [[Access_Profiles|Policies and Profiles]] for specific group of users.

== <span id="Step1">Enable policy from</span>&nbsp;Header Filter Section ==

We will insert header, so that only allowed domains are allowed by GOOGLE.

*Click on&nbsp;'''Restriction Policies''' (Left Side Panel). 
*Click on&nbsp;'''Privacy Control''' submenu. 
*Click on&nbsp;[[Header_filter|Header Filter]]&nbsp;section. Make Sure Global part of this section is&nbsp;Enabled as True.<br/> [[File:Google Corporate 3.png|Google Corporate 3.png|link=]] 
*Click on '''''Insert''''' Tab. 
*Search for default profile named&nbsp;''GOOGLE APPLICATION'' (First Rule).<br/> [[File:Google Corporate 4.png|Google Corporate 4.png|link=]] 
*Edit and Enable this Rule. Add Domains that you need to allow, in value field and&nbsp;Save the Policy.<br/> [[File:Google Corporate 5.png|Google Corporate 5.png|link=]] 

'''Note&nbsp;:''' In case of multiple domains, each should be separated by&nbsp;','&nbsp; with no space.

= Validation =

We will try to login into Personal Gmail account.<br/> [[File:Google Corporate 6.png|Google Corporate 6.png|link=]]<br/> <br/> You will&nbsp;get error template/message from Google, with names of allowed domains.<br/> &nbsp;

{{Seo|keywords=block personal google,corporate google|description=Allow Google Corporate Accounts while blocking personal Google accounts}}

[[Category:How To]]