search

cisagov / ScubaGoggles

SCuBA Security Configuration Baselines and assessment tool for Google Workspace
https://www.cisa.gov/resources-tools/services/secure-cloud-business-applications-scuba-project
Creative Commons Zero v1.0 Universal
129 stars 13 forks source link

Gmail 16.1 - Security Sandbox setting unavailable in admin console #268

Closed snarve closed 2 months ago

snarve commented 2 months ago

🐛 Summary

Gmail baseline policy 16.1 : Security sandbox SHOULD be enabled to provide additional protections for their email messages, the implementation steps are not available in the admin console.

Steps:

  1. Follow the implementation steps from the Gmail baseline policy 16.1
  2. In the admin console go to Gmail -> Spam Phishing and Malware
  3. 'Security Sandbox' setting is not avaialable
jkaufman-mitre commented 2 months ago

@snarve The setting is there. It is exactly where the implementation steps says it is. Please refer to the photo below.

jkaufman-mitre commented 2 months ago

Based on the fact that the setting is present, I recommend closing this issue. @snarve

snarve commented 2 months ago

Looks like it is due to some limitations in the tenant. I am using the sandia tenant and do not see it there.

image

Agreed, no changes are required, but will follow up on this to figure out why it doesn't show in the other tenant.

snarve commented 2 months ago

Closing this issue as test tenant does not have the required license to view certain settings