Mailgun Integration

2023/12

Overview

Many organizations elect to trigger an email notification or email-based workflow when the Oort security platform has a new finding or actionable alert. Please see the Example Use Case - Mailgunsection below for more details.
Up to this point, this email would come from the Oort.io domain. For a more flexible seamless process, Oort has introduced the ability to configure several of the top mail providers.
In the integrations tab, there is a new section for “Email”, which includes options to set up integrations for your own Mailgun service.

Prerequisites

This article assumes that your organization has a Mailgun implementation and you have necessary admin rights to configure it.

Mailgun Configuration

The Oort integration contains the following fields:

Test Connectivity - Mailgun

After the integration is created, you can test connectivity to the service using the 3-dot menu option on the integration row and select Test Connectivity -

Example Use Case - Mailgun

Organizations may find that their users are connecting to corporate systems and applications while using personal 3rd party VPN services like NordVPN or ExpressVPN, or less reputable ones than that. This is a bad security practice and many companies prohibit this within their acceptable use policy.
Oort surfaces personal VPN usage in the Personal VPN Usagecheck. Using the check settings menu, you can configure Oort to send email messages to users (or their managers, if defined in the primary IDP), informing them of this policy violation.
With the Mailgun integration configured above and set to Default Email Service, this email will now originate via Mailgun from the sending From address list.
You can also customize the message sent to the end user per Check.