Proofpoint Email Protection
Version: Proofpoint Email Protection v8.0 and above version
Proofpoint Email Protection provides multiple layers of security to stop malware and non-malware threats, such as email fraud. It can control all aspects of inbound and outbound emails to detect and block threats and prevent confidential information from getting into the wrong hands.
Proofpoint can be integrated with Netsurion Open XDR using API. It helps to monitor the malicious attachments, suspicious URLs, and virus detected in the emails. Alerts are triggered whenever any malicious attachments are detected. Netsurion Open XDR dashboard will help you to visualize the malicious activities detected through emails.
Netsurion Data Source Integrations for Proofpoint Email Protection allows you to monitor the following components:-
- Security – Messages blocked, and clicks blocked.
- Compliance – Clicks permitted, and messages delivered.
The following are the key Data Source Integration available in Netsurion Open XDR.
Alerts
| Type | Name | Description |
|---|---|---|
| Security | Proofpoint – Malware detected | This alert will trigger whenever malware is detected, and malware status is active. |
Reports
| Type | Name | Description |
|---|---|---|
| Security | Proofpoint – Messages blocked | This report shows information about malicious attachments, suspicious URL’s, sender mail address, receiver mail address, attachment detailed information like attachment names, SHA256 hash, and the MD5 hash. |
| Security | Proofpoint – Clicks blockedc | This report provides the information about mail from address, receiver address, which URL has blocked, user agent, etc. |
| Compliance | Proofpoint – Messages delivered | This report provides information about mail from address, receiver address, attachments information, the sender IP address, etc./td> |
| Compliance | Proofpoint – Clicks permitted | This report provides the information about mail from address, receiver address, which URL has permitted, the sender IP address, the user clicked IP address, user agent, etc. |
Documentation
The configuration details are consistent with Netsurion Open XDR 9.x and later, and Proofpoint Email Protection.
Download Integration Guide for configuration instructions and more information