What Changed
ProofPoint TAP CCF connector polling configuration updated to use interval-based time parameters instead of deprecated sinceTime approach, with enhanced authorization headers.
Security Impact (Visibility & Fidelity)
Deployments using the previous polling configuration experienced incomplete data retrieval from ProofPoint TAP APIs. The sinceTime parameter implementation resulted in partial event ingestion, creating potential blind spots in email security monitoring. The new interval-based approach ({_QueryWindowStartTime}/{_QueryWindowEndTime}) ensures complete data coverage within each polling window.
Affected Files
Solutions/ProofPointTap/Data Connectors/ProofpointTAP_CCP/ProofpointTAP_pollingconfig.json
(packaging artefacts updated: mainTemplate.json, Package/*.zip)