Proofpoint Enterprise Protection and Enterprise Privacy

The IBM® QRadar® DSM for Proofpoint Enterprise Protection and Enterprise privacy can collect events from your Proofpoint Enterprise Protection and Enterprise Privacy DSM servers.

The following table identifies the specifications for the Proofpoint Enterprise Protection and Enterprise Privacy DSM:
Table 1. Proofpoint Enterprise Protection and Enterprise Privacy DSM specifications
Specification Value
Manufacturer Proofpoint
DSM name Proofpoint Enterprise Protection/Enterprise Privacy
RPM file name DSM-Proofpoint_Enterprise_Protection/Enterprise_Privacy-QRadar_version-build_number.noarch.rpm
Supported versions

V7.02

V7.1

V7.2

V7.5

V8.0
Protocol

Syslog

Log File
Recorded event types

System

Email security threat classification

Email audit and encryption
Automatically discovered? No
Includes identity? No
Includes custom properties? No
More information Proofpoint website (https://www.proofpoint.com/us/solutions/products/enterprise-protection)

To integrate the Proofpoint Enterprise Protection and Enterprise Privacy DSM with QRadar, complete the following steps:

  1. If automatic updates are not enabled, download and install the most recent version of the Proofpoint Enterprise Protection and Enterprise Privacy DSM RPM from the IBM Support Website onto your QRadar Console.
  2. For each instance of Proofpoint Enterprise Protection and Enterprise Privacy, configure your Proofpoint Enterprise Protection and Enterprise Privacy DSM appliance to enable communication with QRadar.
  3. Add a Proofpoint Enterprise Protection and Enterprise Privacy log source on your QRadar Console.