About the Device
The Mimecast Secure Email Gateway enables you to: Improve security and system performance by thwarting known and advanced email threats before they reach your network. Simplify cloud email security with a single email cloud platform and continually updated threat intelligence. It Applies cloud email security policies across the organization with greater visibility and centralized control for your administrators.
Device Information
Entity | Particulars |
---|---|
Vendor Name | Mimecast |
Product Name | Secure Email Gateway |
Type of Device | Cloud |
Collection Method
Log Type | Ingestion label | Preferred Logging Protocol - Format | Log collection method | Data Source |
---|---|---|---|---|
Mimecast | MIMECAST_MAIL | API - KV | C2C | https://cloud.google.com/chronicle/docs/reference/feed-management-api#mimecast-mail |
Device Configuration
To enable logging to your account
Log in to Administration Console and navigate to Administration > Account > Account Settings.
Select Enhanced Logging Section
Select all type of logs, below are the choices:
Inbound - logs for messages from external senders to internal recipients
Outbound - logs for messages from internal senders to external recipients
Internal - logs for messages between internal domains
Select Save
To create API Application
Log in to Console with credentials.
Click Add API Application
Fill the details as below:
Application Name - Provide a name for the application that you can easily identify.
Category - Select category as SIEM Integration.
Description - Provide a description of the application.
Click Next
Fill the Settings as below:
Developer - Add the name of the application's developer.
Email - Add the email address of the application's developer.
Click on Next
Review the information displayed in the Summary to ensure all details are correct.
Click Add.
To get Application ID and Application Key
Navigate to Administration > Services > API Applications
Click API Application which you have created in previous step.
You will see the Application ID and Application Key. Copy these details for Integration.
To create API Access and Secret Key
To generate access and secret key, please refer section Creating User Association Keys in the below document:
The above steps are applicable for API v1
Integration Parameters
Property | Default Value | Description |
---|---|---|
AUTHENTICATION HTTP HEADER CONFIGURATION | N/A | The configuration in the key-value format that is used to construct the authentication header. |