G Suite Journaling

This topic provides information on how to configure journaling in G Suite and highlights important considerations for security and message management. By following these steps and recommendations, you can seamlessly integrate Gmail with Enterprise Archive, ensuring compliance, security, and easy access to archives for your organization.

Prerequisites

• To utilize this feature, you must have either the Enterprise or Education Plus edition of Gmail.
• You need to have administrative access to the Gmail account.
• Provide an email address that will be used to forward journal messages for integration with Enterprise Archive..
• You can specify multiple email addresses if required, and Gmail will send journal messages to all of them.

Integration Process

To integrate Gmail with a Enterprise Archive:

1. Sign in to your Google Admin using an administrator account.
2. From the admin console, navigate to Apps > Google Workspace > Gmail > Routing.
3. (Optional) Select the organization on the left if applicable.
4. Scroll to Third-party email archiving or use the search field to find this option.
5. Enter the email address where you want to send journal messages.
6. Click Add Setting.
7. Click Save at the bottom of the page to apply the changes.

Message Management

Here's how Gmail handles messages that are journaled:

• Inbound messages: The journaled version is the one received by the user. Attachments removed by content
• compliance policies will not be included in the journal copy.
• Outbound messages: The journaled version is the one sent by the user. Attachments stripped by content compliance
• policies will still be present in the journal copy.
• Internal messages: For messages sent within your domain, the recipient receives an inbound message while the
• sender's copy is treated as an outbound message.

Messages sent to admin quarantines are managed as follows:

• Inbound messages: Journal copies are sent once the message is released from the quarantine. Denied quarantined
• messages are not archived.
• bound messages: Journal copies are sent when the user clicks "Send," regardless of whether the message is
• quarantined.

Messages with multiple recipients or unrecognized recipients:

• Inbound messages to multiple recipients: Separate journal copies are sent for each recipient if compliance or routing
• policies affect the message differently.
• Outbound messages to multiple recipients: The copy sent by the sender is journaled.
• Messages for unrecognized recipients: Journals are not sent for messages received by unrecognized recipients.

SMTP Failure Codes and Retry Mechanism

In case of SMTP delivery failures:

• Temporary errors (4xx): Gmail retries to send the message to the journal address for up to 8 days.
• Permanent errors (5xx): Gmail does not attempt to resend the message.