Proofpoint Email Protection

Integration version: 5.0

Integrate Proofpoint Email Protection with Google Security Operations SOAR

For detailed instructions on how to configure an integration in Google Security Operations SOAR, see Configure integrations.

Integration inputs

To configure the integration, use the following parameters:

Parameters
API Root Required

API root of your Proofpoint Email Protection instance.

Username Required

Username of your Proofpoint Email Protection instance.

Password Required

Password of your Proofpoint Email Protection instance.

Verify SSL Optional

If checked, verifies that the SSL connection certificate to the Proofpoint server is valid.

Actions

Before running actions, make sure to configure their respective parameters, if any.

Enrich Entities

Enrich entities with Proofpoint Email Protection.

Entities

This action runs on the following entities:

  • Hostname
  • User

Action inputs

N/A

Action outputs

Action output type
Case wall attachment N/A
Case wall link N/A
Case wall table N/A
Enrichment table Available
JSON result N/A
Script result Available
Entity enrichment
Enrichment field Logic
dlpviolation N/A
messagestatus N/A
Script result
Script result name Value
is_success True/False

Ping

Test the Proofpoint Protection Server connectivity.

Entities

This action runs on all entities.

Action inputs

N/A

Action outputs

Action output type
Case wall attachment N/A
Case wall link N/A
Case wall table N/A
Enrichment table N/A
JSON result N/A
Script result Available
Script result
Script result name Value
is_success True/False