Execute Response Actions with Proofpoint TAP

Configure the action connector for Proofpoint.

In this guide, you will create new credentials for the Proofpoint API in order to enable containment and remediation tasks.

Available actions

The following action is available after you set up the Proofpoint action connector. Keep in mind, additional permissions are required.

• Block sender

At the end of this configuration, you will provide Radiant Security with the following values:

• Username

• Password

• API Base URL

• Domain

To configure the Proofpoint data connector, check out the Proofpoint guide.

Create credentials for the Proofpoint API

1. Sign in to the TAP dashboard.

2. Navigate to Administration > User Management > Users.

3. Click Add a User.

4. Fill in the required information:

   • First Name: Enter any name that identifies this credential as the Radiant Security Action Connector credential

   • Email Address: Enter any valid email address

   • Role: Organization Admin

5. Click Save.

6. Check the inbox of the email address used to create the user account and look for the Welcome email sent by Proofpoint. Click on the link provided in this email to set the password and activate the account.

Add the action connector in Radiant Security

1. Login to Radiant Security.

2. From the navigation menu, select Settings > Action Connectors and click + Add Connector.

3. Select the Proofpoint API V1 vendor and click Credentials.

4. Enter the credential values used to create the Proofpoint API credentials in the previous section:

   • User

   • Password

   • API Base URL: the ssame URL used to log into Proofpoint console

   • Domain: the domain configured on Proofpoint

5. Click Add Connector to save the connector configuration.