Does anyone know how the GSuite restriction works?

[loganx1121]

I've enabled the proxy and have it setup as transparent with a CA.  Normal whitelist/blacklist works fine and I've confirmed the endpoint is going through the proxy as it should.

I'm trying to block personal gmail accounts and only allow corporate gsuite accounts.  Under forward proxy > advanced (see screenshot) there's an option to restrict GSuite, but I'm not sure how it works.  I tried googling it and didn't find much.

If I put say, the name of my local domain in there, I can't get to gmail.com at all.  In fact it seems anything I put in there blocks getting to gmail.com.  What I'm trying to do is just not allow logging into personal accounts but still allow corporate Gsuite accounts, which supposedly, I should be able to do with this option?

Just wondering if anyone has any idea how to get that to work, or maybe a different way to do it?

I found this https://redmine.pfsense.org/issues/11060?tab=history and it says you need to add a header, but I'm not seeing anything in the proxy GUI that would let me do that.

Thanks in advance