Allow Google services for specific domains

How to block access to consumer accounts for Google Services

Back to Proxy acls main section

As an administrator, you might want to prevent users from signing in to Google services using any accounts other than those you provided them with.
For example, you might not want users within your corporate network to use their personal Gmail accounts or a managed Google Account from another domain.
This option will only work if you have SSL interception enabled and well configured on your Proxy!

Allow access only from specific domains

To allow users to access Google services using an account only from a list of specified Google Workspace domains:

On left menu, click on WAF / ACLs and then Headers Rules

Prevent users from inserting their own headers
Click New Rule

Set a Rule Name
On HTTP Header list select X-GoogApps-Allowed-Domains
On Type select Delect client header
Click Add

Add the HTTP header X-GoogApps-Allowed-Domains
Click New Rule

Set a Rule Name
On HTTP Header list select X-GoogApps-Allowed-Domains
On Type select Add client header
On Values add the list of domain separated by a comma, eg: articatech.com,artica.fr
Click Add

Click Apply to compile the rules

Final Result

Now when you try logon on a Google Servie using you personal account or an account outside of allowed domains, you will get this message.