When configuring a new domain for Proofpoint Essentials, all of a customer's domains must be both verified and have the relay enabled so that they can send and receive emails.

IMPORTANT: Once the domain has been verified and enabled, you MUST wait 60 minutes before the domain is available for routing inbound and outbound.

Adding Domains to Proofpoint

Log into the Proofpoint portal that matches your tenant's region.

If you are adding a domain for a customer rather than your own account, navigate to Customer Management > Customers and click on them in the list. Once you are logged in, navigate to Account Management > Domains.

To add a new domain to Proofpoint, click the New Domain button:

Set the domain type to Relay. For the primary delivery destination, fill in the value of the domain's current MX record. For O365 domains, the format should resemble website-com.mail.protection.outlook.com.

If your O365 domain doesn't have an MX record published, you can find what this value should be in the O365 Admin Center through the following steps:

  • Log into the O365 Admin Center (https://admin.microsoft.com/)
  • Navigate to Settings > Domains
  • Click on your domain name in the list, then click on "DNS Records"
  • Note the value in the row labeled MX

Before setting up an existing domain, click on the three dots on the right side of the screen, then click Edit Domain:

Ensure that the domain type is set to Relay and that the correct delivery destination (the value of your default O365 MX record) is filled in.

Prepare O365 Routing

On the Account Management > Domains page, click on Manage Hosted Services:

Turn on the option for Office 365, then click Save.

Verify and Enable Domains

For each domain on the Account Management > Domains page, click the Verify Domain button:

This will display a TXT record that will need to be added to the domain's DNS zone. Once this TXT record is published, click on Verify Now.

Once this is complete, you may now click the button for Enable Relay next to your domain on the Account Management > Domains page.

Once enabled, the relay needs at least 60 minutes to fully activate before proceeding.

Proceed to next step: Update SPF Record