Proofpoint

Configure the Proofpoint data connector.

Overview

Adding the Proofpoint data connector in Radiant Security gives your organization visibility into phishing links accessed from unmanaged devices. With this data, Radiant Security can identify users who clicked phishing links from personal devices, enabling deeper investigations and a comprehensive view of the attack.

At the end of this configuration, you will provide Radiant Security with these values:

  • Service Principal
  • Secret
  • Console URL
  • Domain

Prerequisites

  • An email address registered as Proofpoint service account
    • If you do not already have a service account, you must create one, as it will need to be provided along with the access credentials.
    • The service account must have at least the Basic Administrator permission.
  • Permission to complete the configuration: Proofpoint admin console access

Generate Proofpoint TAP service credentials

  1. Sign in to the TAP dashboard.
  2. Navigate to Settings > Connected Applications.
  3. Click Create New Credential.
  4. Name the new credential set and click Generate.
  5. Copy the Service Principal and Secret values from the prompt. You’ll provide these values to Radiant Security in the upcoming step.

Important note: Be sure to document and store the Secret value carefully, as it cannot be retrieved later.

Add the data connector in Radiant Security

  1. Log in to Radiant Security.
  2. From the navigation menu, select Settings > Data Connector and click + Add Connector.
  3. Select the Proofpoint vendor from the list and click Data Feeds.
    Captura de Tela 2024-02-29 às 16.19.48
  4. Under Select your data feeds, select URL Defense and click Credentials.
    Captura de Tela 2024-02-29 às 16.19.52
  5. Under Credential Name, give the credential an identifiable name (e.g.Proofpoint Credentials)
  6. Under Required Credentials, select the API Base URL and input the API Token that you copied from the previous section.
  7. Click Add Connector to save the changes.
    Captura de Tela 2024-02-29 às 16.20.52

Add the action connector in Radiant Security

  1. From the navigation menu, select Settings > Action Connectors and click + Add Connector to create a new action connector.
  2. Select the Proofpoint API V1 Connector and click Credentials.
    Captura de Tela 2024-03-03 às 15.53.46
  3. Create the new set of credentials:
    • User
    • Password
    • API Base URL - same URL used to log into Proofpoint console
    • Domain: the domain to which the action connector will affect
  4. Add Connector to save your changesCaptura de Tela 2024-03-03 às 16.14.06

 

We value your opinion. Did you find this article helpful? Share your thoughts by clicking here or reach to our Product and Customer Success teams at support@radiantsecurity.ai 

 

Last updated: 2024-08-23