> For the complete documentation index, see [llms.txt](https://docs.dropzone.ai/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.dropzone.ai/integrations/alert/mimecast.md). # Mimecast Dropzone AI integrates with [Mimecast 2.0](https://www.mimecast.com/), a secure email gateway that sits in front of an organization's email and filters emails, detecting threats such as malware, phishing and scams. ## Integration Overview To enable these integrations you will perform the following actions: * Create a Custom Administration Role for your application * Create an API 2.0 application * Select integration parameters, such as which alert types to sync ## Create a Custom Admin Role To limit Dropzone's access to your data, you may choose to create a custom [administrator role](https://mimecastsupport.zendesk.com/hc/en-us/articles/34000745394963-Roles-Understanding-Administrator-Roles#h_01JA88CBVKZ961KRA66F67D34Q) for your API application. You may skip this step and use the `Full Administrator` role instead, though some advanced features of the integration will be unavailable to you. * In your Mimecast homepage, click "Administration Console"

* In the left hand sidebar, navigate to Account > Admin Roles

* Click "New Role"

* Name the role something memorable, such as "Dropzone AI Application Role"

* Assign the role the following permissions: | Permission | Scope | Purpose | | ------------------------------------------------------------------- | ------------ | ------------------------------------------------------------------ | | Security Events and Data Retrieval - Threat and Security Statistics | Read | Allows Dropzone to see flagged threats and alerts within Mimecast | | Gateway - Tracking | Read | Allows Dropzone to search for and retrieve specific email messages | | Archive - Search | Read | Allows Dropzone to retrieve email body content | | Archive - Search | Content View | Allows Dropzone to retrieve email body content | {% hint style="info" %} The Archive - Search `Content View` permission is only available to those with Superadmin privileges. Contact your Mimecast representative if you do not have it. Only the `Security Events and Data Retrieval` permission is required for the basic function of the integration. {% endhint %}

The "Security Events and Data Retrieval" permission section

* At the top of the role, click "Save and Exit" ## Create an API Key Mimecast requires an API key to enable. To create an API key, you must have a Security Permissions setting of "Manage Application Roles" * In your Mimecast homepage, click "Administration Console"

* In the left hand sidebar, navigate to Integrations > API and Platform Integrations

* Locate the Mimecast API 2.0 tile * Click "Generate Keys"

* Name the application something memorable, such as Dropzone AI * Select the products you want Dropzone to have access to * Assign the application a role (either the custom role you just created or the Full Administrator role) * Input a memorable description for the application

* Designate a Technical Point of Contact for the application

* At the top of the application, click "Save" * Copy the credentials shown for use later in the Dropzone UI where they are called "Client ID" and "Client Secret" respectively

## Enable Mimecast To enable the Alert Source integration, you will need the following information: | Dropzone Field | Source | | -------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | API URL | The URL of your Mimecast 2.0 instance. If you do not know your API URL, see [here](https://developer.services.mimecast.com/api-overview#:~:text=with%20appropriate%20permissions.-,API,-Gateway%20Options) for more information | | Client ID | The Client ID value you generated earlier | | Client Secret | The Client Secret value you generated earlier | To enable the Alert Source integration, do the following: * Navigate to your Dropzone AI tenant home page e.g. https\://*mycompany*.dropzone.app * In the bottom left hand corner, click Settings > Integrations

* Click "Available"

* In the Search bar, search Mimecast, then click "Configure"

* Input the API URL, Client ID and Client Secret

The Mimecast Alert Source Configuration (pt 1)

* Select the [types](https://mimecastsupport.zendesk.com/hc/en-us/articles/34000509365651-Analysis-Response#h_01JED5RV0B0N5GXENM8PRVM6NG:~:text=Protection%20blocked%20clicks.-,Detection,-Categories) of threats you wish for Dropzone AI to investigate

The Mimecast Alert Source Configuration (pt 2)

* Select the [statuses](https://mimecastsupport.zendesk.com/hc/en-us/sections/34523591340051-Message-Center) of threats you wish for Dropzone AI to investigate

The Mimecast Alert Source Configuration (pt 3)

* Select the threat sources you want Dropzone AI to ingest

The Mimecast Alert Source Configuration (pt 4)

* Check the box labeled "Search Content View Enabled" to allow Dropzone to retrieve the content of emails for analysis {% hint style="success" %} Only do so if you have granted the application the necessary permissions. {% endhint %}

The Mimecast Alert Source Configuration (pt 5)

* Input your desired poll interval and lookback

* If you wish to further filter alerts using the Python [CEL](https://python-common-expression-language.readthedocs.io/en/stable/tutorials/cel-language-basics/) package, check the box labeled "Use advanced filtering" * Input your CEL expression, then select whether to include or exclude alerts matching that filter. Add each filter individually using the "Add Item" button * Contact your Dropzone AI support representative for more information about this feature

The Mimecast Alert Source Configuration (pt 6)

* Click "Test & Save" to finish If you have any errors or questions, engage your Dropzone AI support representative.