Email collection from Proofpoint

Has anyone had to collect email accounts that use ProofPoint for their email systems? Can FEC be used or is their in-house Proofpoint Content Collector tool the only means of collecting that data?

Proofpoint typically sits in front of an email provider such as M365. In that case, you can perform an FEC acquisition of the underlying mailboxes by targeting that provider. For M365, you would set up a custom Exchange profile, click the O365 hyperlink to configure FEC for M365’s servers, and choose the Use OAuth option.

There may be journaled or archived emails that are only available in Proofpoint but not the underlying email provider. Therefore, I suggest complementing your FEC acquisition with an export of such items from Proofpoint.