--- title: "Mimecast Email Security" slug: "mimecast-email-security" updated: 2026-08-31T14:22:48Z published: 2026-08-31T14:22:48Z canonical: "docs.databee.buzz/mimecast-email-security" --- > ## Documentation Index > Fetch the complete documentation index at: https://docs.databee.buzz/llms.txt > Use this file to discover all available pages before exploring further. # Mimecast Email Security Mimecast provides your organization with security, continuity, and archiving cloud services in a mail management system designed to protect email, ensure access, and simplify the tasks of managing email. For detailed information, please refer to the [Mimecast official documentation](https://www.mimecast.com/). **Integration Method:** API **Tables**: Detection Finding (2004), Email Activity (4009) This integration supports the following events. | **Event** | **Description** | | --- | --- | | SIEM Logs | Retrieves all the Mail Transfer Agent (MTA) logs | | DLP Logs | Retrieves all the messages that triggered a DLP or Content Examination policy | | Threats | Retrieves all the rejected, blocked and held events with detailed information | This integration supports the following versions. | | | | --- | --- | | Mimecast API version | v2.0 | > **Note:** > > Mimecast doesn’t follow a traditional versioning system. Instead, it is a continuously updated cloud service. As for this document preparation, the latest release was on **February 17, 2025.** For more information, refer [here](https://developer.services.mimecast.com/whats-new). ## Prerequisites - The user should have access to the [Mimecast portal](https://login.mimecast.com/u/login/?gta=apps#/login) with an account that has the Administratorprivileges. - The user should have access to the DataBee console. ## Configuration Overview 1. Generate the API token with the required scopes. 2. Add the [Mimecast Email Security data feed](/user-manual/docs/mimecast-siem#databee-configuration) in the DataBee console with the below parameters. | **DataBee Parameter** | **Mimecast Parameter** | | --- | --- | | Client Key | [Client Id](/docs/mimecast-email-security#clientid_secret) | | Client Secret | [Client Secret](/docs/mimecast-email-security#clientid_secret) | ## Mimecast Configuration 1. Login to the [Mimecast portal](https://login.mimecast.com/) and click on **Administration Console**. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/mimecast-email-security-mar2025-image-ogtveuxs.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A22%3A06Z&se=2026-10-30T13%3A22%3A06Z&sr=c&sp=r&sig=IYZgg7xeGYSggsEo1sqXe3TKDg%2FccLQpgVqe%2FnRTaoU%3D) 2. In the “Administration Console” page, click on **Services** and then click on **API and Platform Integrations**. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/mimecast-email-security-mar2025-image-zqxxgdrm.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A22%3A06Z&se=2026-10-30T13%3A22%3A06Z&sr=c&sp=r&sig=IYZgg7xeGYSggsEo1sqXe3TKDg%2FccLQpgVqe%2FnRTaoU%3D) 3. In the “API and Platform Integrations” page, under **Available Integrations**, click on **Generate Keys** below the Mimecast API 2.0. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/mimecast-email-security-mar2025-image-1veoqw71.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A22%3A06Z&se=2026-10-30T13%3A22%3A06Z&sr=c&sp=r&sig=IYZgg7xeGYSggsEo1sqXe3TKDg%2FccLQpgVqe%2FnRTaoU%3D) 4. Acknowledge the legal terms and click **Next**. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/mimecast-email-security-mar2025-image-wrz0gikd.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A22%3A06Z&se=2026-10-30T13%3A22%3A06Z&sr=c&sp=r&sig=IYZgg7xeGYSggsEo1sqXe3TKDg%2FccLQpgVqe%2FnRTaoU%3D) 5. In the “Details” page, fill in the details for ‘Application Name’ and in the ‘Category’ drop down, click on **Other**. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/mimecast-email-security-mar2025-image-86vm6wo4.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A22%3A06Z&se=2026-10-30T13%3A22%3A06Z&sr=c&sp=r&sig=IYZgg7xeGYSggsEo1sqXe3TKDg%2FccLQpgVqe%2FnRTaoU%3D) 6. In the ‘Products’ drop down, select **Threats**, **Security Events and Data for Cloud Gateway**, **Threat Management**, **Security Events**, **Email Security Cloud Gateway** and click **APPLY**. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/mimecast-email-security-mar2025-image-oklmyfve.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A22%3A06Z&se=2026-10-30T13%3A22%3A06Z&sr=c&sp=r&sig=IYZgg7xeGYSggsEo1sqXe3TKDg%2FccLQpgVqe%2FnRTaoU%3D) 7. In the ‘Application Role’ drop down, select **Basic Administrator**. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/mimecast-email-security-mar2025-image-pxqo7rkq.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A22%3A06Z&se=2026-10-30T13%3A22%3A06Z&sr=c&sp=r&sig=IYZgg7xeGYSggsEo1sqXe3TKDg%2FccLQpgVqe%2FnRTaoU%3D) 8. Verify the following information is correctly populated and then click on **Next**. 9. Application Name: enter an appropriate name for the integration. 10. Category: select **Other**. 11. Products:select the following list of products from the drop down for seamless data ingestion. - Threats, Security Events and Data for CG - Threat Management - Security Events - Email Security Cloud Gateway - Description:enter an appropriate description of the integration. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/mimecast-email-security-mar2025-image-v9rf0qjz.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A22%3A06Z&se=2026-10-30T13%3A22%3A06Z&sr=c&sp=r&sig=IYZgg7xeGYSggsEo1sqXe3TKDg%2FccLQpgVqe%2FnRTaoU%3D) 9. In the “Notifications” page, write the required details and click **Next**. - Technical Point of Contact: name of the POC. - Email: email address of the POC. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/mimecast-email-security-mar2025-image-n48h94c5.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A22%3A06Z&se=2026-10-30T13%3A22%3A06Z&sr=c&sp=r&sig=IYZgg7xeGYSggsEo1sqXe3TKDg%2FccLQpgVqe%2FnRTaoU%3D) 10. In the “Summary” page, review the details and click **Add and Generate Keys**. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/mimecast-email-security-mar2025-image-ms5n4oq9.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A22%3A06Z&se=2026-10-30T13%3A22%3A06Z&sr=c&sp=r&sig=IYZgg7xeGYSggsEo1sqXe3TKDg%2FccLQpgVqe%2FnRTaoU%3D) 11. Copy both the **Client Id** and **Client Secret** by clicking the respective copy icon and store somewhere safe as it will be required later. Click **Close** after copying. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/mimecast-email-security-mar2025-image-p2oak9hk.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A22%3A06Z&se=2026-10-30T13%3A22%3A06Z&sr=c&sp=r&sig=IYZgg7xeGYSggsEo1sqXe3TKDg%2FccLQpgVqe%2FnRTaoU%3D) ```plaintext > **Note:** > > The Client Secret cannot be retrieved after this, so make sure you have copied this to a secure place. ``` ## DataBee Configuration 1. Login to the DataBee UI, navigate to **Data** > **Data Feeds** and click the **Add New Data Feed** button. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/mimecast-email-security-mar2025-image-5ngy9q3y.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A22%3A06Z&se=2026-10-30T13%3A22%3A06Z&sr=c&sp=r&sig=IYZgg7xeGYSggsEo1sqXe3TKDg%2FccLQpgVqe%2FnRTaoU%3D) 2. Search for the **Mimecast Email Security** and click it as shown below. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/mimecast-email-security-mar2025-image-xx20qsog.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A22%3A06Z&se=2026-10-30T13%3A22%3A06Z&sr=c&sp=r&sig=IYZgg7xeGYSggsEo1sqXe3TKDg%2FccLQpgVqe%2FnRTaoU%3D) 3. Click on the **API Ingest** option for collection method. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/mimecast-email-security-mar2025-image-qfljl6rh.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A22%3A06Z&se=2026-10-30T13%3A22%3A06Z&sr=c&sp=r&sig=IYZgg7xeGYSggsEo1sqXe3TKDg%2FccLQpgVqe%2FnRTaoU%3D) 4. Enter feed contact information and click **Next**. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/mimecast-email-security-mar2025-image-pkine77c.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A22%3A06Z&se=2026-10-30T13%3A22%3A06Z&sr=c&sp=r&sig=IYZgg7xeGYSggsEo1sqXe3TKDg%2FccLQpgVqe%2FnRTaoU%3D) 5. In the configuration page, confirm the following: 6. Authorization Method: OAuth2 7. API Base URL: this is the base URL that DataBee will interact with. 8. Authorization Method: OAuth2 9. Client Key: paste the [Client Id](/docs/mimecast-email-security#clientid_secret) which was copied earlier. 10. Client Secret: paste the [Client Secret](/docs/mimecast-email-security#clientid_secret) which was copied earlier. 11. Token URL: this is the token URL that DataBee will interact with. 12. Event Types: preselected for all the event types that integration pulls. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/mimecast-email-security-mar2025-image-eqa4awbp.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A22%3A06Z&se=2026-10-30T13%3A22%3A06Z&sr=c&sp=r&sig=IYZgg7xeGYSggsEo1sqXe3TKDg%2FccLQpgVqe%2FnRTaoU%3D) 6. Click **Test Connection** to verify your credentials. A **Connection successful!** message confirms that DataBee can reach the Mimecast Email Security API with the credentials provided. 7. Click **Submit**. ## Troubleshooting Tips - Ensure the client key and secret is pasted correctly. Since you cannot view the secrets after the 1st time, re-create the secrets, paste it on a text editor to ensure no spaces or unexpected characters are included and reconfigure the DataBee feed. - Ensure the Mimecast scopes/permissions are correct.