Integrate Trend Micro Email Security
You must have the Email integrations license pack to use this feature.
You can integrate Trend Micro Email Security with Sophos Central so that it sends data to Sophos for analysis.
This is an API-based integration.
The key steps are as follows:
- Get an API key and account details from Trend Micro Email Security.
- Configure an integration in Sophos Central.
Get details from Trend Micro Email Security
You must get the following details from your Trend Micro Email Security account:
- API key
- Username
- Regional URL
Generate an API key
To generate the API key you need for integration, do as follows:
- Log in to the Trend Micro Email Security administrator console.
-
Go to Administration > Service Integration.
The API Access tab is open by default.
-
Click Add to generate an API key.
The API key is the global unique identifier your integration will use to authenticate when it accesses Trend Micro Email Security.
-
Copy the API key value and save it. Keep the API key private. You'll need to use it later in Sophos Central.
Get your username
Your username is the username of the Trend Micro Email Security account.
Get your Regional URL
Here are the Regional URLs we support:
| Region | Regional URL |
|---|---|
| North America, Latin America and Asia Pacific | api.tmes.trendmicro.com |
| Europe and Africa | api.tmes.trendmicro.eu |
| Australia and New Zealand | api.tmes-anz.trendmicro.com |
| Japan | api.tmems-jp.trendmicro.com |
| Singapore | api.tmes-sg.trendmicro.com |
| India | api.tmes-in.trendmicro.com |
| Middle East (UAE) | api.tmes-uae.trendmicro.com |
Next, you configure an integration in Sophos Central.
Configure an integration
To integrate Trend Micro Email Security with Sophos Central, do as follows:
- In Sophos Central, go to Threat Analysis Center > Integrations > Marketplace.
-
Click Trend Micro - Email Security.
The Trend Micro - Email Security page opens. You can configure integrations here and see a list of any you've already configured.
-
In Data Ingest (Security Alerts), click Add Configuration.
Note
If this is the first integration you've added, we'll ask for details about your internal domains and IPs. See Provide your domain and IP details.
-
In Integration steps, do as follows:
- Enter the Integration name and Integration description.
- Enter the Base URL. This is the Trend Micro Regional URL.
- Enter the API Token. This is the API key you got from Trend Micro.
- Enter the Username for the Trend Micro account.
-
Click Save
We create the integration and it appears in your list. If its status icon shows a green tick, your data should appear in the Sophos Data Lake after validation.