Skip to main content

CollectorsCloud Collectors Administration Guide

Prerequisites to Configure the Mimecast Cloud Collector

Before you configure the Mimecast Email Security connector you must complete the following prerequisites:

For more information about each endpoint see the Mimecast Documentation.

  • Obtain Mimecast Email Security account information, including region, application ID, application key, access key, and secret key by creating a Mimecast API application

  • Ensure that you have the Mimecast administrator role

  • Use user persona enrichment to ensure that Mimecast syncs groups and users that are used for enrichment of the events. To use user persona enrichment, you must have the Mimecast administrator role with Directories, Internal, and Read permission.

  • Ensure that you have the following permissions for the required endpoints

    Endpoint Name

    Required Permissions

    Archive Search Logs

    Archive, Search Logs, Read

    Archive Message View Logs

    Archive, View Logs, Read

    TTP URL Logs

    Monitoring, URL Protection, Read

    TTP Impersonation Protect Logs

    Monitoring, Impersonation Protection, Read

    Attachment Protection Logs

    Monitoring, Attachment Protection, Read

    Audit Events

    Account, Logs, Read

Create a Mimecast API App to Obtain Application Keys

To obtain Mimecast Email Security account information, including region, application ID, application key, access key, and secret key:

  1. Log in to the Mimecast administrator console.

  2. Navigate to Administration > Services > API Applications.

  3. Click Add API Application.

  4. Follow the steps to obtain application ID and application key in the Adding an API Application section.

  5. Follow the steps in the Creating User Association Keys section to generate access key and secret key.

    Note

    Ensure that as the Mimecast administrator, you have the required Accounts, Dashboard, and Read permissions to use the endpoint and generate association keys.

    Copy the values for the application ID, application key, access key, and secret key. Use these values, represented by a string of letters and numbers, to configure the Mimecast Email Security cloud connector.