Who rated this post

Step 1 Make sure you are decrypting traffic from the inside to the outside

Step 2 Create a custom URL with *.google.com and *.gmail.com

Step 3 Create a URL FILTER  

Select HTTP HEADER Insertion

                Called it GMAIL-GOOGLE  Type Google apps Access control

                                Under domain add the following *.google.com and gmail.com

                                Select header X-GooApps-Allowed domain

                                Under value add your corporate domain example.com paloaltonetworks.com etc

You can add 5 domains

STEP 4 create a policy

INSIDE-2-OUTSIDE   Inside outside APPS GOOGLE-APPS service URL Category=GMAIL-COORPORATE Action= allow profile=url Filtering =GMAIL-FILTER

GOOGLE-APPS= GMAIL, Google-BASE, ssl, RTCP,rtp-base,stun,web-browsing vidyo