Using simplex traffic should work and we have not seen any known issues in such a configuration that are due to monitoring the simplex traffic
You have to ensure that the Network monitor is getting proper traffic feed for all the SMTP traffic going out of the organization.
Please note however that this is not a fully QA'd scenario and it would be suggested if SMTP only monitoring is required that the usage of SMTP Prevent is suggested.