Summary #

Here we detail the changes you need to make to your SecureSchool appliance to allow access to Gmail email service through a mail client(Thunderbird, Android/iOS Mail App, etc.). These changes are NOT needed if you simply wish to access Gmail through a web browser. Gmail uses the following ports (110, 143, 465, 587, 993 and 995) and wants to go out directly to the internet, not thru the proxy. So you will have to make firewall rules to allow access for these ports to the Google IP address ranges. This will give allow your end users access to any Gmail account, not just your domain.

Client Access Configuration #

1. To allow GMail to work through SecureSchool, you need to create several firewall rules. Go to “Firewall” > “Protocol Rules” > “Add A Rule”. Add a rule using these settings:
   • Rule Name: Gmail Access #1
   • Reason: Allow Access to Gmail
   • Type: Allow
   • Protocol: TCP
   • Direction: From All Inside Interfaces
   • Source Address: “0.0.0.0/0”
   • Source Port: Leave blank
   • Destination Address > IP Address > ADDRESS ON LIST BELOW
   • Destination Port: 110, 143, 465, 587, 993, 995
   • Add Protocol Rule
2. Repeat the above process for each of the following “Destination Address”:
   • 216.239.32.0/19
   • 64.233.160.0/19
   • 66.249.80.0/20
   • 72.14.192.0/18
   • 209.85.128.0/17
   • 66.102.0.0/20
   • 74.125.0.0/16
   • 64.18.0.0/20
   • 207.126.144.0/20
   • 173.194.0.0/16
   • 216.58.192.0/19
   • 108.177.8.0/21
3. Once you are done, go to “Commit Changes” then restart.