Proofpoint Email Protection

Applies To: Proofpoint Email Protection v8.0 and above version

Overview

Proofpoint Email Protection provides multiple layers of security to stop malware and non-malware threats, such as email fraud. It can control all aspects of inbound and outbound emails to detect and block threats and prevent confidential information from getting into the wrong hands.

Proofpoint can be integrated with EventTracker using API. EventTracker KP for Proofpoint will help, to monitor the malicious attachments, suspicious URL’s, and virus detected in the emails. Alerts are triggered whenever any malicious attachments are detected. EventTracker dashboard will help you to visualize the malicious activities detected through emails.

EventTracker Knowledge Pack for Proofpoint Email Protection allows you to monitor the following components:-

Security – Messages blocked, and clicks blocked.
Compliance – Clicks permitted, and messages delivered.

Previous Next

Some of the Knowledge Packs available in EventTracker are listed below.

Compliance

Reports

Proofpoint – Messages delivered: This report provides information about mail from address, receiver address, attachments information, the sender IP address, etc.
Proofpoint – Clicks permitted: This report provides the information about mail from address, receiver address, which URL has permitted, the sender IP address, the user clicked IP address, user agent, etc.

Security

Alerts

Proofpoint: Malware detected - This alert will trigger whenever malware is detected, and malware status is active.

Reports

Proofpoint – Messages blocked: This report shows information about malicious attachments, suspicious URL’s, sender mail address, receiver mail address, attachment detailed information like attachment names, SHA256 hash, and the MD5 hash.
Proofpoint – Clicks blocked: This report provides the information about mail from address, receiver address, which URL has blocked, user agent, etc.

Scope

The configuration details in this guide are consistent with EventTracker version 9.x and later, and Proofpoint Email Protection v8.0 and above version.

Documentation

For more information, please refer to the Proofpoint Email Protection Integration guide.