Alternate secure route

The Alternate secure route setting is one of multiple options on the Gmail settings page for managing mail routing and delivery for your domain. This setting modifies routing behavior as configured in the Secure transport (TLS) compliance setting for messages that require secure transport—by creating a potential fallback secure route. Domains not listed in TLS rules can be rerouted to this alternate route.

You'll want an alternate route if you have a third-party encryption service. You can then use the Alternate secure route setting to route otherwise insecure traffic to it.

After you configure an advanced Gmail setting, it may take up to one hour for that configuration to propagate to individual user accounts. You can track prior changes under Admin console audit log

Note: Before you configure the Alternate secure route setting, you must first add mail routes with the Hosts tab. Specifically, you must add a host that contains the appropriate level of TLS delivery that you want to use.

Configure the Alternate secure route setting for your domain:

  1. Sign in to the Google Admin console.
  2. From the dashboard, go to Apps > G Suite > Gmail > Advanced settings.
  3. In the Organizations section, ensure that the top-level org is highlighted.
  4. Scroll down to the Alternate secure route section, or type Alternate secure route in the search box.
    • If the setting's status is Not configured yet, click Configure (the "Add setting" dialog box displays).
    • If the setting's status is Locally applied, click  Edit to edit an existing setting (the "Edit setting" dialog box displays).  
  5. Enter a short description that will display within the setting's summary.
  6. Select the Use alternate secure route when secure transport (TLS) is required option.
  7. Select a route from the drop-down list. (If you've not already done so, you must first add mail routes with the Hosts tab).
    Note: All mail that requires secure transport, which is sent to hosts that you have not identified as TLS-enabled, will be routed to the alternate secure route.
  8. When you're finished making changes, click Add setting or Save to close the dialog box.
    Note: Any settings you add will be highlighted on the "Email settings" page.
  9. Click Save changes at the bottom of the "Email settings" page.

Note: When you're finished, click Add Setting (at the bottom of the dialog box), and then click Save changes (at the bottom of the "Email settings" page) to confirm your changes.
Was this article helpful?
How can we improve it?