Proofpoint Email Protection
Integration version: 5.0
Integrate Proofpoint Email Protection with Google Security Operations SOAR
For detailed instructions on how to configure an integration in Google Security Operations SOAR, see Configure integrations.
Integration inputs
To configure the integration, use the following parameters:
| Parameters | |
|---|---|
API Root |
Required API root of your Proofpoint Email Protection instance. |
Username |
Required Username of your Proofpoint Email Protection instance. |
Password |
Required Password of your Proofpoint Email Protection instance. |
Verify SSL |
Optional If checked, verifies that the SSL connection certificate to the Proofpoint server is valid. |
Actions
Before running actions, make sure to configure their respective parameters, if any.
Enrich Entities
Enrich entities with Proofpoint Email Protection.
Entities
This action runs on the following entities:
- Hostname
- User
Action inputs
N/A
Action outputs
| Action output type | |
|---|---|
| Case wall attachment | N/A |
| Case wall link | N/A |
| Case wall table | N/A |
| Enrichment table | Available |
| JSON result | N/A |
| Script result | Available |
Entity enrichment
| Enrichment field | Logic |
|---|---|
dlpviolation |
N/A |
messagestatus |
N/A |
Script result
| Script result name | Value |
|---|---|
| is_success | True/False |
Ping
Test the Proofpoint Protection Server connectivity.
Entities
This action runs on all entities.
Action inputs
N/A
Action outputs
| Action output type | |
|---|---|
| Case wall attachment | N/A |
| Case wall link | N/A |
| Case wall table | N/A |
| Enrichment table | N/A |
| JSON result | N/A |
| Script result | Available |
Script result
| Script result name | Value |
|---|---|
| is_success | True/False |