GoDMARC

To enforce a policy in Google Workspace that blocks emails when SPF and DKIM authentication fails, you need to set up advanced Gmail settings in the Google Admin console. Here's how you can do it:

Steps to Set Up the Policy

1. Access the Admin Console:

   • Sign in to your Google Admin console at admin.google.com.

2. Navigate to Gmail Settings:

   • From the Admin console home page, go to
   • Apps
     

     Google Workspace
     

     Settings for Gmail
     

     Safety

3. Navigate to Spoofing and authentication

4. Choose the relevant policys "Protect against inbound emails spoofing your domain" and Protect against any unauthenticated emails

5. 

6. 

7. GoDMARC also recommends seeing other policy under the same category Spoofing and authentication and enable them as per your requirement.