401 Error When using Proofpoint Protection Server v2

michaelsysec242 — Wed, 12 Mar 2025 14:36:41 GMT

Hello LiveComm,

I am trying to establish the Proofpoint Protection Server v2 integration on my XSOAR to use the SmartSearch and other cool features. I am doing this for a supported pphosted (POD) version and have created API credentials for this and I get a 401 Unauthorized for Test and other commands. The instructions to do this are a bit ambiguous. Has anyone successfully succeeded in establishing this integration?

Does this require an API with the API role or is this an administrator user that I create to get this to work?

Take note that my server url is https://XXXXXXX.pphosted.com:10000

Many thanks,

MSysec

Re: 401 Error When using Proofpoint Protection Server v2

asawyer — Thu, 13 Mar 2025 23:11:59 GMT

Hi @michaelsysec242 – My understanding is you actually have to create a role of type API, which is different from an administrator role. Please see the steps here. Since you are using PoD, you must file a support ticket to Proofpoint support to obtain a role with access to an API.

If that still doesn't work, please export a debug log and grab screenshots of your integration instance settings and open a support case.

topic 401 Error When using Proofpoint Protection Server v2 in Cortex XSOAR Discussions

401 Error When using Proofpoint Protection Server v2

Re: 401 Error When using Proofpoint Protection Server v2