Where this offering fits
Core Email Protection is Proofpoint’s email-threat protection offering, with integration choices that must fit the mail architecture. Compare the intended gateway or API approach against the messages, tenants and user workflows in scope. The choice affects routing, permissions and operational recovery.
Architecture and rollout decisions
Inventory domains, shared mailboxes and application senders before configuring policy. Pilot legitimate attachments alongside authorised threat examples and review false positives with mail administrators. Decide who releases messages, investigates reports and coordinates identity recovery after a phishing event. Keep the rollback method explicit when a deployment changes the live message path.
An evaluation scenario for this offering
Use a shared finance mailbox, a normal employee mailbox and an application-generated notification in the pilot. Check representative attachments and the process for reviewing quarantined legitimate mail. Include a permitted test threat and verify who receives the resulting case. The exercise should demonstrate both protection and a usable recovery path, because a deployment that interrupts legitimate invoices or service alerts can create pressure to bypass controls through unmanaged sending or sharing methods.
Evidence to request for this scope
- Confirm supported mail platforms and selected deployment mode.
- Validate shared-mailbox and application-sender behaviour.
- Test quarantine review and the approved response to an inspection outage.