Configure the Webhook on the Proofpoint DLP tenant for alert notifications to ServiceNow

task australia Updated Sep 10, 2026 1 min read configure-webhook-proofpoint-tenant-alert-notifications.md
Raw file servicenow.com

Configure a webhook on Proofpoint using the REST API endpoint to start getting the alerts from the Proofpoint DLP tenant. Your ServiceNow instance creates DLP incidents from these alerts. The Proofpoint DLP integration provides a REST API endpoint for end users to configure the webhook.

Before you begin

Role required: sn_pp_dlp.api_integration_user

Procedure

  1. Log in to Proofpoint.

  2. Navigate to Proofpoint Tenant > Administration Application > Integration > Notification Policies.

  3. Create a notification policy with an appropriate name.

  4. Click the Notification policy and manage the webhooks configured on the notification policy.

  5. Create a new webhook configuration by clicking Add Webhooks.

  6. Select the webhook type as Generic.

  7. In URL Input, enter a URL using the format: https://<Instance_Name>.service-now.com/api/sn_pp_dlp/proofpointalertapi/getalerts.

  8. Keep the method as POST.

  9. Add the following headers to the webhook:

    • Text
      
      

Name: Authorization Value: Basic

Text
    -   ```Name: Content-Type Value: application/json
  1. D not change the other values.

  2. Click Save.

  3. Navigate to Proofpoint Tenant > Administration Application > Policies > Rules.

  4. In the Actions section, select the rules for which the webhook notification should be generated.

  5. Add the newly created Notification policies that have a webhook configured.

  6. Click Save.

Parent Topic:Install and configure the Proofpoint integration for Data Loss Prevention

Search documentation
Search document titles and file paths on the australia branch