https://community.checkpoint.com/t5/Firewall-and-Security-Management/MTA-email-data-missing-from-logging/m-p/61076#M13293 I believe we only log emails we act upon (e.g. with Threat Emulation/Extraction). Sat, 24 Aug 2019 00:31:09 GMT PhoneBoy 2019-08-24T00:31:09Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/MTA-email-data-missing-from-logging/m-p/60969#M13292 We are using our checkpoint appliance as an MTA. External email is directed to checkpoint and then to our internal email servers. We are also threat emulating attachments. If an email comes into the system and passes through checkpoint with no attachment we do not see any of the email data in the smartlog. If the email has an attachment and threat emulation emulates the file we see the subject, sender, receipient in smartlog. Is there any reason the normal email just passing through the appliance does not show in smartlog? Thu, 22 Aug 2019 17:34:32 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/MTA-email-data-missing-from-logging/m-p/60969#M13292 Eric_Lindsey1 2019-08-22T17:34:32Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/MTA-email-data-missing-from-logging/m-p/61076#M13293 I believe we only log emails we act upon (e.g. with Threat Emulation/Extraction). Sat, 24 Aug 2019 00:31:09 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/MTA-email-data-missing-from-logging/m-p/61076#M13293 PhoneBoy 2019-08-24T00:31:09Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/MTA-email-data-missing-from-logging/m-p/61151#M13294 <P>from R80.20, the new MTA blade does log all Emails (even without attachment inspection).</P> <P>Are you using the new MTA blade?</P> Sun, 25 Aug 2019 14:42:55 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/MTA-email-data-missing-from-logging/m-p/61151#M13294 Dror_Aharony 2019-08-25T14:42:55Z