Skip to content

Proofpoint Browser Isolation

Proofpoint Browser Isolation


Digital Threats not only attack your users via corporate work emails, but also when they engage in personal browsing from their corporate devices. Proofpoint Browser Isolation is web isolation built with simplicity, based on intelligence from Targeted Attack Protection (TAP) Isolation. It helps lower your attack surface and provides complete browser security. Browser Isolation integrates with TAP to provide you with adaptive controls that allow corporate email to isolate URL clicks based on the risk profile of user or URL being clicked.

Product Details

Vendor URL: Proofpoint Browser Isolation

Product Type: Browser Isolation

Product Tier: Tier II

Integration Method: Custom

Integration URL: Proofpoint Browser Isolation - Cyderes Documentation

Log Guide: N/A

Parser Details

Log Format: JSON

Expected Normalization Rate: Near 100%


UDM Fields (list of all UDM fields leveraged in the Parser):

Log File Field UDM Field
Hard-Coded: ProofPoint metadata.vendor_name
Hard-Coded: ProofPoint Browser Isolation metadata.product_name
version metadata.product_version
category metadata.product_event_type
Hard-Coded: GENERIC_EVENT metadata.event_type
userName principal.user.userid
userId principal.user.product_object_id
region principal.location.country_or_region
url target.url
disposition security_result.action

Product Event Types

Description metadata.event_type

Log Sample

{"categories":["BUSINESS AND ECONOMY"],"date":"2022-01-12T15:51:06.000+0000","disposition":"ALLOW","region":"US","url":"","userId":"a2447886-7bcc-4e18-ad9b-8REDACTED","userName":"","zone":"CENTRAL"}

Sample Parsing

metadata.event_timestamp.seconds: 1642002666
metadata.event_type: GENERIC_EVENT
metadata.vendor_name: "ProofPoint"
metadata.product_name: "ProofPoint Browser Isolation"
metadata.product_event_type: "BUSINESS AND ECONOMY"
principal.user.product_object_id: "a2447886-7bcc-4e18-ad9b-8REDACTED"
principal.user.userid: ""
principal.location.country_or_region: "US" "CENTRAL"
target.url: ""
security_result.action: ALLOW

Parser Alerting

This product currently does not have any Parser-based Alerting.


Coming Soon.