Proofpoint
Proofpoint provides a unified solution against advanced email threats. Logpoint aggregates and normalizes the Proofpoint logs so you can analyze the information through dashboards. Proofpoint’s dashboard visualizes event details for the Targeted Attack Protection (TAP) click and message events. Proofpoint TAP monitors the email flow for malicious URLs and objects. Upon detecting the malicious content, the TAP service triggers an alert to Threat Response for further investigation.
Enhancement
| Description | Issue ID | Reference ID |
|---|---|---|
| Added Syslog Collector based Proofpoint log source template, simplifying the log source configuration process. To learn more, go to Creating Log Source via a Template. | KB-22751 | - |
Past Releases
Proofpoint v5.1.2
Release Date: September 05, 2023
Supported On: Logpoint v6.7.0 and later
Download: Proofpoint_5.1.2.pak
SHA256: d453d9dd12569b0c984cad20bf4daab73874c91eda22c121c6d7d1efb97d1f33
Enhancements
|
Description
|
Issue ID
|
Zendesk Issue ID
|
|---|---|---|
|
Renamed the rcpts field as receiver in ProofpointCompiledNormalizer. |
KB-10649 | - |
|
ProofpointTAPCompiledNormalizer now normalizes Proofpoint Targeted Attack Protection logs with syslog header. |
KB-20665 | 73971 |
| The log_host and process fields are now normalized by ProofpointTAPCompiledNormalizer. |
Proofpoint v5.1.0
Release Date: August 12, 2021
Supported On: Logpoint v6.7.0 and later
Download: Proofpoint_5.1.0.pak
SHA256: 68af7c0530cfca280cc0ce6a3a4b70e05624ecb609e72b97c81e315bf6f0fc26
Enhancement
|
Description
|
Issue ID
|
Zendesk Issue ID
|
|---|---|---|
| Added a new compiled normalizer ProofpointTAPCompiledNormalizer that supports the Proofpoint Targeted Attack Protection logs. | KB-7539 | 34149 |
Proofpoint v3.1.2
Release Date: October 10, 2020
Supported On: Logpoint v6.0.0 to v6.6.6
Download: Proofpoint_3.1.2.pak
Proofpoint has been upgraded to support Logpoint v6.7.0
Enhancement
A minor update has been done in Proofpoint's normalizer for better signature handling.
Support
If you have any questions or require assistance, create a support ticket.
Comments
Article is closed for comments.