---
sourceDocument: Australia Security Management
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/security-management

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia Security Management

ft:clusterId :

    - security

bundleId :

    - security

workflow :

    - Technology


---

# Explore

# Exploring the Proofpoint Integration for Security Operations {#ariaid-title1}

* Release version: Australia
* 
* Updated March 12, 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read

You can configure event profiles in SIR to ingest events from Proofpoint. SIR creates an incident for each ingested event which analysts can review or work
on.

## Proofpoint Integration for Security Operations users {#proofpoint-integration-secops-exploring__cf-exploring-parent-users}

{#proofpoint-integration-secops-exploring__table_at5_k2g_b2c__entry__2}

| User | Description |
|-|-|
| Security admin | Create event profiles for filtering the ingested events. SIR creates incidents for these the ingested events. |
[Table 1. Users]

{#proofpoint-integration-secops-exploring__table_at5_k2g_b2c}

## Proofpoint Integration for Security Operations benefits {#proofpoint-integration-secops-exploring__cf-exploring-parent-benefits}

{#proofpoint-integration-secops-exploring__table_dt5_k2g_b2c__entry__3}

| Benefit | Feature | Users |
|-|-|-|
| Pull event data into your instance and create security incidents. Review security incidents from a single location for events deemed suspicious or malicious. | If the delivered email messages and permitted clicks are later deemed malicious, chances are these messages were opened and interacted with by your employees. To track these messages for review, automatically create security incidents based on the event profiles you create and configure for message traffic for the integration. Additionally, you can also enable creating security incidents for the blocked messages and clicks for audit purposes. | Managers |
[Table 2. Proofpoint Integration for Security Operations benefits]

{#proofpoint-integration-secops-exploring__table_dt5_k2g_b2c}

## What to explore next {#proofpoint-integration-secops-exploring__cf-exploring-parent-links}

To learn more about configuring and using Proofpoint, see:

* [Configuring the Proofpoint Integration for Security Operations](https://servicenow-prod.fluidtopics.net/LMVWSNwGbHug7NtvArJH~Q "Configure your implementation of the Proofpoint Integration for Security Operations.")
* [Review Proofpoint integration settings](https://servicenow-prod.fluidtopics.net/mI_RKJAvRKascdh9L9rD6w "Review the Proofpoint integration settings so that you can modify the system properties for your environment.")
* [View the Proofpoint Analytics Dashboard](https://servicenow-prod.fluidtopics.net/uD90XVr5P8xCTZ13MwyUyg "The Proofpoint Analytics Dashboard provides details about VAP users and top clickers.")
{#proofpoint-integration-secops-exploring__ul_et5_k2g_b2c}