how to set up scan to email using g-suite email

Envelope Filter, select Only affect specific envelope senders and then change the dropdown from 'Single email address' to Pattern Match Account types to affect, select Users and Groups Scroll down, and under Route, check Change route, and then change the dropdown from 'Normal Routing' to Internal Google Workspace.Under Messages to affect, check the box that says Internal Sending.For the description at the top, put Internal Routing.Scroll down to Routing, and then press Configure.Click Settings for Gmail in the upper left again, then click Routing.Make sure that Perform MX lookup on host is NOT checked, and that Require mail to be transmitted via a secure connection, Require CA signed certificate, and Validate certificate hostname are checked, then press Save.For Name, put Internal Google Workspace, for single host, put aspmx.l. and then put 25.Click Settings for Gmail in the upper left, then click on Hosts (or go to ).In the Outbound Gateway text field, enter the Proofpoint Essentials Smart host value.Highlight Outbound Gateway and click on the pencil icon on the right side.From the dashboard go to Apps > Google Workspace > Gmail > Routing.Make sure to turn off 'Apply future recommended settings automatically' as well, as this may cause the 'Protect against any unauthenticated emails' to be turned back on again causing an error.If is is enabled, it may cause unexpected delivery issues for incoming email. Emails with issues are scored accordingly and quarantined if they exceed your spam threshold.

Proofpoint Essentials has already scanned incoming emails for SPF and/or DKIM issues.

Protect against any unauthenticated emails.

If you have Spoofing and authentication settings enabled (either all or customized) consider the following setting:.

You can leave these settings as they are. No changes to Attachments settings or Links and external images are required.

While signed into the Google Admin console, go to Apps > Google Workspace > Gmail.

Please review the following steps to ensure your settings are supported. G Suite's safety settings allow organizations to enable or disable policies related to viewing and accessing email. If you have enabled some or all of these settings you may experience some delivery issues. The error that the other server returned was: 421 4.7.0 IP not in whitelist for RCPT domain, closing connection. We recommend contacting the other email provider at for further information about the cause of this error. Google tried to deliver your message, but it was rejected by the relay aspmx.l. It is possible for senders to route directly to your mail system instead of following normal MX lookups to route through Proofpoint. If you do uncheck this box, your mail server is not locked down to only accept external mail from Proofpoint IP's. In this case, their only solution that they have provided is to uncheck the box that says 'Reject all mail not from gateway IPs' There have been instances where Google has blocked it's own IP addresses from delivering.

Click Save and then Enable the Inbound Gateway.

Check Require TLS for connection from the email gateways listed above.

Check Reject all mail not coming from gateway IPs.

This is referred to as the “external IP.” Gmail considers the “external IP” as the sending IP and uses this IP for SPF checks and spam evaluation. When this setting is enabled, Gmail scans the message header to locate the first occurrence of an IP address that is not listed in the Gateway IPs. Check Automatically detect external IP.

How to set up scan to email using g-suite email