commonfields:
  id: Proofpoint Server Protection
  version: -1
name: Proofpoint Server Protection
display: Proofpoint Protection Server (Deprecated)
deprecated: true
category: Email
provider: Thoma Bravo
description: Deprecated. Use Proofpoint Protection Server V2 instead.
configuration:
- display: Server URL (e.g., https://192.168.0.1:10000)
  name: server
  defaultvalue: ""
  type: 0
  required: true
- display: Username
  name: credentials
  defaultvalue: ""
  type: 9
  required: true
- display: Proofpoint Protection Server Version (e.g., 8.14.2)
  name: version
  type: 0
  required: false
- display: Trust any certificate (not secure)
  name: unsecure
  type: 8
  required: false
- display: Use system proxy settings
  name: proxy
  type: 8
  required: false
script:
  script: ''
  type: python
  commands:
  - name: proofpoint-download-email
    arguments:
    - name: message_id
      required: true
      default: true
      description: The GUID of the email message to download.
    description: Download quarantine email message by ID.
  - name: proofpoint-quarantine-messages
    arguments:
    - name: folder
      description: Folder name to quarantine.
    - name: sender
      description: Messages from sender to quarantine.
    - name: subject
      description: Messages subject to quarantine.
    - name: recipient
      description: Messages to recipient to quarantine.
    outputs:
    - contextPath: Proofpoint.Quarantine.Message.ID
      description: Message ID.
      type: string
    - contextPath: Proofpoint.Quarantine.Message.Date
      description: Message date.
      type: date
    - contextPath: Proofpoint.Quarantine.Message.Recipient
      description: Message recipient.
      type: string
    - contextPath: Proofpoint.Quarantine.Message.Sender
      description: Message sender.
      type: string
    - contextPath: Proofpoint.Quarantine.Message.Subject
      description: Message subject.
      type: string
    - contextPath: Proofpoint.Quarantine.Message.Folder
      description: Message folder.
      type: string
    description: Retrieves quarantined email messages.
  - name: proofpoint-smart-search
    arguments:
    - name: sender
      description: Email sender.
    - name: recipient
      description: Email recipient.
    - name: subject
      description: Email subject.
    - name: process
      auto: PREDEFINED
      predefined:
      - "1"
      - "2"
      - "3"
      - "4"
      - "5"
      - "100"
      - "200"
      - "500"
      - "1000"
      description: Max results.
      defaultValue: "100"
    - name: sender_hostname
      description: Sender hostname/IP address.
    - name: attachment
      description: Attachment name.
    - name: qid
      description: QID.
    - name: time
      auto: PREDEFINED
      predefined:
      - Last15Minutes
      - Last60Minutes
      - Last3Hours
      - Last24Hours
      - Last7Days
      - Last15Days
      - Last30Days
      - Last90Days
      description: Time period in which the email was recieved.
      defaultValue: Last24Hours
    - name: message_id
      description: Email message ID.
    - name: virus_name
      description: Virus name.
    - name: sid
      description: SID.
    - name: guid
      description: GUID.
    outputs:
    - contextPath: Proofpoint.SmartSearch.SMIMERecipients
      type: string
      description: Search results SMIME recipients.
    - contextPath: Proofpoint.SmartSearch.FID
      type: string
      description: Search results FID.
    - contextPath: Proofpoint.SmartSearch.MessageID
      type: string
      description: Search results email message ID.
    - contextPath: Proofpoint.SmartSearch.Suborg
      type: string
      description: Search results sub organization.
    - contextPath: Proofpoint.SmartSearch.Agent
      type: string
      description: Search results email agent.
    - contextPath: Proofpoint.SmartSearch.AttachmentNames
      type: string
      description: Search results email attachment names.
    - contextPath: Proofpoint.SmartSearch.MoudleID
      type: string
      description: Search results module ID.
    - contextPath: Proofpoint.SmartSearch.MessageSize
      type: string
      description: Search results email message size.
    - contextPath: Proofpoint.SmartSearch.SpamScore
      type: string
      description: Search results email spam score.
    - contextPath: Proofpoint.SmartSearch.GUID
      type: string
      description: Search results GUID.
    - contextPath: Proofpoint.SmartSearch.QuarantineRule
      type: string
      description: Search results email message quarantine rule.
    - contextPath: Proofpoint.SmartSearch.VirusNames
      type: string
      description: Search results virus names.
    - contextPath: Proofpoint.SmartSearch.Subject
      type: string
      description: Search results email subject.
    - contextPath: Proofpoint.SmartSearch.QID
      type: string
      description: Search results QID.
    - contextPath: Proofpoint.SmartSearch.FinalAction
      type: string
      description: Search results email final action.
    - contextPath: Proofpoint.SmartSearch.DispositionAction
      type: string
      description: Search results email disposition action.
    - contextPath: Proofpoint.SmartSearch.SID
      type: string
      description: Search results SID.
    - contextPath: Proofpoint.SmartSearch.SendmailToStat
      type: string
      description: Search results sent email to stats.
    - contextPath: Proofpoint.SmartSearch.Date
      type: date
      description: Search results date.
    - contextPath: Proofpoint.SmartSearch.PERecipients
      type: string
      description: Search results email PE recipients.
    - contextPath: Proofpoint.SmartSearch.FQIN
      type: string
      description: Search results email FQIN.
    - contextPath: Proofpoint.SmartSearch.FinalRule
      type: string
      description: Search results email final rule.
    - contextPath: Proofpoint.SmartSearch.SendmailStat
      type: string
      description: Search results email stats.
    - contextPath: Proofpoint.SmartSearch.MessageSplit
      type: string
      description: Search results email split message.
    - contextPath: Proofpoint.SmartSearch.Duration
      type: string
      description: Search results duration time.
    - contextPath: Proofpoint.SmartSearch.SendmailAction
      type: string
      description: Search results sent mail action.
    - contextPath: Proofpoint.SmartSearch.Sender
      type: string
      description: Search results email sender.
    - contextPath: Proofpoint.SmartSearch.SendmailIPAddress
      type: string
      description: Search results send mail IP address.
    - contextPath: Proofpoint.SmartSearch.SendmailTo
      type: string
      description: Search results send mail to.
    - contextPath: Proofpoint.SmartSearch.Recipients
      type: string
      description: Search results recipients.
    - contextPath: Proofpoint.SmartSearch.SendmailRawLog
      type: string
      description: Search results send mail raw log.
    - contextPath: Proofpoint.SmartSearch.TLS
      type: string
      description: Search results TLS.
    - contextPath: Proofpoint.SmartSearch.QuarantineFolder
      type: string
      description: Search results quarantine folder.
    - contextPath: Proofpoint.SmartSearch.RawLog
      type: string
      description: Search results raw log.
    - contextPath: Proofpoint.SmartSearch.DispositionSmtpProfile
      type: string
      description: Search results disposition SMTP profile.
    - contextPath: Proofpoint.SmartSearch.PolicyRoutes
      type: string
      description: Search results policy routes.
    - contextPath: Proofpoint.SmartSearch.MessageEncrypted
      type: string
      description: Search results encrypted message.
    - contextPath: Proofpoint.SmartSearch.SenderHost
      type: string
      description: Search results sender host.
    - contextPath: Proofpoint.SmartSearch.SMIMRecipientsSigned
      type: string
      description: Search results SMIME recipient signed.
    description: Searches for emails.
  - name: proofpoint-quarantine-folders
    arguments: []
    outputs:
    - contextPath: Proofpoint.Quarantine.Folder.Name
      description: Folder name.
      type: string
    description: Returns a list of quarantined folders.
  - name: proofpoint-release-email
    arguments:
    - name: message_id
      required: true
      description: Email message ID to release.
    - name: folder
      required: true
      description: Email folder to release.
    description: Release email with virus scan.
  - name: proofpoint-add-to-blocked-senders-list
    arguments:
    - name: email
      required: true
      description: Email to add to blocked senders list.
    description: Adds an email address to blocked senders list.
  - name: proofpoint-add-to-safe-senders-list
    arguments:
    - name: email
      required: true
      description: Email to add to safe senders list.
    description: Adds an email address to safe senders list.
  - name: proofpoint-remove-from-blocked-senders-list
    arguments:
    - name: email
      required: true
      description: Email to remove from blocked senders list.
    description: Removes an email address from blocked senders list.
  - name: proofpoint-remove-from-safe-senders-list
    arguments:
    - name: email
      required: true
      description: Email to remove from safe senders list.
    description: Removes an email address from safe senders list.
  dockerimage: demisto/bs4-py3:1.0.0.117152
  subtype: python3
tests:
- no test
fromversion: 5.0.0