NG SIEM - Mimecast Integration

Introduction 

 The Mimecast integration collects events from the  Mimecast API . 

 Agentless integrations allow you to collect data without having to manage Elastic Agent in your cloud. They make manual agent deployment unnecessary, so you can focus on your data instead of the agent that collects it. For more information, refer to  Agentless integrations  and the  Agentless integrations FAQ . Agentless deployments are only supported in Elastic Serverless and Elastic Cloud environments. This functionality is in beta and is subject to change. Beta features are not subject to the support SLA of official GA features. 

 Requirements 

 

 API URL 

 Client ID 

 Client Secret 

 

 

 Creating an API 2.0 Application : 

 

 Log in to  Mimecast Administration Console 

 Navigate to  Integrations | API and Platform Integrations 

 Locate the following  Mimecast API 2.0  tile and click on  Generate Keys. 

 

 After reading the  Terms & Conditions , complete the  I accept  check box to enable the  Next  button to progress onto the next step. 

 

 

 Complete the  Application Details  section. 

 

 

 

 We highly recommend creating a dedicated custom role with  only  the permissions required for the Application to function. 

 Select the minimum set of Products the App needs to access to function. 

 

 

 Should we need to contact you regarding this API application, please provide details for a  Technical Point of Contact. 

 

 

 Mimecast recommends a group rather than an individual contact. 

 

 

 Review the Summary information for the API application and click on  Add  if you are happy to proceed with creating the application. 

 

 The wizard completes and displays a pop-up window including your Client ID and Client Secret key data, where you can copy and save the credentials for the API application. 

 

 

 

 

 Base URL (Mimecast API v2) 

 To transition from your current API 1.0 URLs to API 2.0, we provide three API gateway options tailored to fulfill your performance, compliance, and data residency requirements: 

 

 Global URL : The global API URL  api.services.mimecast.com  which serves traffic from the nearest instance ensuring reduced latency and enhanced performance. 

 UK Instance URL : For compliance and data residency requirements, customers can choose to process traffic via the UK instance using the regional URL:  uk-api.services.mimecast.com . This ensures API traffic is only processed within the UK instance of the Apigee Gateway. 

 US Instance URL : Similarly, customers with compliance or residency requirements in the US can use  us-api.services.mimecast.com to process API traffic exclusively through the US instance of the Apigee Gateway. 

 

 

 Please provide the following information to CyTech Support. Thank you 

 

 API URL 

 Client ID 

 Client Secret 

 

 

 

 If you need further assistance, kindly contact our support at  support@cytechint.com  for prompt assistance and guidance.