[Setup Step 1]: Setting up a new Account in Proofpoint Essentials

Create Account Using New Account Wizard: (Only Used If Your A Partner)

1. Navigate to Administration > Customer Management > Customers > Add A Customer
   1. Account Type: Channel (Partner account) or Organization (Customer account)
   2. Select License: Beginner, Business, Advanced, Professional (See Licensing Options and features)
      1. Add number of Licenses.
   3. Add Company Name, Address, Phone, Website.
   4. Add Initial Domain and the Administrators First and Last Name, Phone, Email. (Note: this email address MUST be part of the initial domain being added).
   5. Review Settings and click either Purchase or Start 30 day trial to complete account creation
   6. Verify Initial Domain.  You can skip this for now by choosing Save - Verify Later (Verification Steps).
   7. Accept EULA.

Configure All Inbound Domains:

Navigate to Administration > Account Management > Domains > Domains.

1. Edit Initial domain by clicking edit icon to the right of the domain
   1. Change domain purpose to Relay.
   2. Add Primary Destination and any desired failover destinations

      This is your Mail Servers IP or DNS name for Proofpoint to hand off mail. Failovers are optional but can help if your primary route becomes unavailable

2. If you opted to save domain verification for later in the Setup Wizard on Step 1, see Verification Steps to complete verification
3. Repeat for all additional domains using Essentials services by clicking New Domain on the domains page and adding additional domains.

   You may optionally leave these as Management domains until you are ready to Verify and enable Relaying for them

4. Ensure your firewall will allow all Proofpoint IP's through on Port 25.  You can find all our IP's on the Connection details page.

Configure Outbound Sending Servers (If Using Essentials For Outbound):

1. Navigate to Administration > Account Management > Domains > Sending Servers
   1. Click New Sending Server.
   2. Add any public IP addresses / ranges for servers that will be sending outbound mail to Proofpoint. 

      Proofpoint can accept CIDR notation for ranges to /24. We do not accept lower notations for /20 or /18 etc.

   3. Repeat for all Mail Servers and any applications, services, or devices sending outbound through Proofpoint for any of your domains .
2. Add the Proofpoint SPF record to your existing DNS SPF settings. See Connection details for your specific setting.

   Add to your existing SPF and do not replace any current entries.

3. You must also configure your Mail System to send external mail to Proofpoint when ready.
   1. Point all external mail to the Proofpoint Smarthost - See Connection details for your specific setting.

      You may configure this in preparation for the switch, but DO NOT enable this in your mail system until the final step in section 5 is reached or outbound mail will be rejected by Proofpoint.

Configure Users / Functional Accounts

Choose only ONE of the Below methods:

By default, Users will receive a Welcome email as soon as added.  To disable this, go to Administration > Account Management > Notifications and disable the Welcome Email checkbox.  You have the option to use Mass Update on the Users List to send this later if desired.

The following five methods are available to select from:

• Manual User Creation
• CSV Import
• Active Directory Sync
• Azure Directory Sync
• SMTP Discovery

Configure DNS Settings 

All Previous Steps MUST be fully completed before this final step.

1. Approximately one hour before you switch your MX to Proofpoint do the following:
   1. Navigate to Administration > Account Management > Domains > Domains section 
   2. Toggle the Relay Button to on (move to the right position) for all domains you will be switching MX for.
2. Wait ONE HOUR for settings to propagate.
3. Add Proofpoint MX Records as the lowest number preference to your DNS MX record.  See Connection details for your MX settings. 

   Once you are comfortable that Mail Flow is working as expected, you should remove the old MX's that are directed directly to your mail server.

4. Check the Log Search soon after switching MX to confirm mail is routing through Proofpoint. The details icon to the right of any message log will provide valuable insight into quarantines, blocks, deferrals etc. if needed for troubleshooting.
5. Once you are comfortable with inbound mail flow, you may now enable your mail server to send external outbound mail to the Proofpoint Smarthost as well.