API & Integrations - Zscaler Threat Share - Service Update - May 2025

Service Update

Availability	May 6th, 2025
Product(s)	Email Security Cloud Gateway
Who's affected	End-users, Administrators

Overview

Mimecast is pleased to announce the launch of the Zscaler Threat Share Integration, a powerful new feature that enables seamless sharing of malicious domains detected in your Mimecast account with your Zscaler account. This integration enhances your organization's security ecosystem by bridging the gap between Mimecast and Zscaler, providing an additional layer of protection against persistent threats.

What's changing

With the Zscaler Threat Share Integration:

• Enhanced Security: Malicious domains identified by Mimecast's URL Protection and Impersonation Protection can now be shared with Zscaler, strengthening your defenses against threats that span multiple attack vectors.
• Customizable Configurations: Organizations can create up to 10 unique configurations, allowing for tailored actions in Zscaler based on different Mimecast sources. This includes many-to-one tenant configurations for organizations with multiple Zscaler accounts.
• Quota Monitoring: The integration includes quota monitoring, with alerts sent when the Zscaler URL quota reaches 90% or 100%. This ensures proactive management of URL categories.
• Streamlined Integration Setup: A step-by-step process allows for easy configuration of the integration, including OAuth 2.0 setup, URL category creation in Zscaler, and policy application.

Recommended actions

1. Ensure you meet the prerequisites:

• • A Mimecast Cloud Gateway account with Targeted Threat Protection (URL Protection and/or Impersonation Protection).
  • A Zscaler account.
  • OAuth 2.0 application setup (Okta or Microsoft Entra ID).

2. Configure the integration:

• • Log into Zscaler's ZIA Admin Portal and Mimecast's Cloud Gateway Administration Console.
  • Follow the detailed setup instructions to create API roles, register OAuth 2.0 applications, and configure the integration in Mimecast.
  • Apply the newly created URL categories in Zscaler policies to activate protection.

3. Monitor quota usage and address any alerts to ensure uninterrupted operation.

See Also...

• API & Integrations - Zscaler Threat Share Integration