NG SIEM - Mimecast Integration

Introduction

The Mimecast integration collects events from the Mimecast API.

Agentless integrations allow you to collect data without having to manage Elastic Agent in your cloud. They make manual agent deployment unnecessary, so you can focus on your data instead of the agent that collects it. For more information, refer to Agentless integrations and the Agentless integrations FAQ. Agentless deployments are only supported in Elastic Serverless and Elastic Cloud environments. This functionality is in beta and is subject to change. Beta features are not subject to the support SLA of official GA features.

Requirements

• API URL
  
• Client ID
• Client Secret

Creating an API 2.0 Application:

• Log in to Mimecast Administration Console
• Navigate to Integrations | API and Platform Integrations
• Locate the following Mimecast API 2.0 tile and click on Generate Keys.
• After reading the Terms & Conditions, complete the I accept check box to enable the Next button to progress onto the next step.
• Complete the Application Details section.

We highly recommend creating a dedicated custom role with only the permissions required for the Application to function.

Select the minimum set of Products the App needs to access to function.

• Should we need to contact you regarding this API application, please provide details for a Technical Point of Contact.

Mimecast recommends a group rather than an individual contact.

• Review the Summary information for the API application and click on Add if you are happy to proceed with creating the application.

• The wizard completes and displays a pop-up window including your Client ID and Client Secret key data, where you can copy and save the credentials for the API application.

Base URL (Mimecast API v2)

To transition from your current API 1.0 URLs to API 2.0, we provide three API gateway options tailored to fulfill your performance, compliance, and data residency requirements:

• Global URL: The global API URL api.services.mimecast.com which serves traffic from the nearest instance ensuring reduced latency and enhanced performance.
• UK Instance URL: For compliance and data residency requirements, customers can choose to process traffic via the UK instance using the regional URL: uk-api.services.mimecast.com. This ensures API traffic is only processed within the UK instance of the Apigee Gateway.
• US Instance URL: Similarly, customers with compliance or residency requirements in the US can use us-api.services.mimecast.com to process API traffic exclusively through the US instance of the Apigee Gateway.

Please provide the following information to CyTech Support. Thank you

• API URL
  
• Client ID
• Client Secret

If you need further assistance, kindly contact our support at support@cytechint.com for prompt assistance and guidance.