What Changed

Fortra Agari has been fully migrated from a legacy Azure Functions-based connector to the modern Codeless Connector Framework (CCF). This introduces a completely new CCF-based Data Connector with comprehensive DCR configuration and custom table schemas for all Agari product lines.

Data Sources Unlocked

The CCF connector provides ingestion for five distinct Agari data streams:

  • Brand Protection (BP) Alerts: Domain protection events with SPF/DKIM failure tracking (AgariBPAlertsLog_CL)
  • Phishing Defense (APD) Policy Events: Policy action logs and enforcement decisions (AgariAPDPolicyLog_CL)
  • Phishing Defense Threat Categories: Email threat classification with attachment analysis (AgariAPDTCLog_CL)
  • Brand Protection Threat Feed: IoC submissions and URL reputation data (AgariBPThreatFeedSubs_CL)
  • Phishing Response (APR) Investigations: Investigation attachment metadata (AgariAPRInvestigationsLog_CL)

Ingestion Mechanism

  • Framework: CCF with DCR-based ingestion time transformations
  • Authentication: OAuth2 Client Credentials (separate credentials per product line)
  • Deployment: Replaces all Azure Functions infrastructure (PowerShell runtime, ARM templates, zip packages removed)
  • Configuration: Multi-stream poller with configurable data source selection

Security Impact

This migration restores email security visibility for deployments that may have had broken or inefficient Function App connectors. The CCF framework provides more reliable ingestion with better error handling and monitoring capabilities. Organizations using Agari for email threat protection now have a modern, supported ingestion path for brand protection alerts, phishing detection events, and threat feed indicators.

Affected Files

.gitignore
Solutions/Agari/Data Connectors/Agari_API_FunctionApp.json
Solutions/Agari/Data Connectors/Agari_CCF/Agari_ConnectorDefinition.json
Solutions/Agari/Data Connectors/Agari_CCF/Agari_DCR.json
Solutions/Agari/Data Connectors/Agari_CCF/Agari_PollerConfig.json
Solutions/Agari/Data Connectors/Agari_CCF/table_AgariAPDPolicyLog.json
Solutions/Agari/Data Connectors/Agari_CCF/table_AgariAPDTCLog.json
Solutions/Agari/Data Connectors/Agari_CCF/table_AgariAPRInvestigationsLog.json
Solutions/Agari/Data Connectors/Agari_CCF/table_AgariBPAlertsLog.json
Solutions/Agari/Data Connectors/Agari_CCF/table_AgariBPThreatFeedSubs.json
Solutions/Agari/Data Connectors/AzureFunctionAgari/function.json
Solutions/Agari/Data Connectors/AzureFunctionAgari/run.ps1
Solutions/Agari/Data Connectors/azuredeploy_Agari_API_FunctionApp.json
Solutions/Agari/Data Connectors/host.json
Solutions/Agari/Data Connectors/profile.ps1
Solutions/Agari/Data Connectors/requirements.psd1
Solutions/Agari/Package/testParameters.json
(packaging artefacts: 3.0.0.zip, ReleaseNotes.md, SolutionMetadata.json, Solution_Agari.json, agari.zip, createUiDefinition.json, mainTemplate.json)