topic Re: what does action=bypass mean for product="Anti-Spam and Email Security" in General Topics

what does action=bypass mean for product="Anti-Spam and Email Security"

sp_gdi_lab — Wed, 27 Dec 2023 09:51:28 GMT

I have some logs generated from the product "Anti Spam & Email Security" which has action=Bypass in it. Does anyone know what action=bypass signifies in context with the given product?

Is the email being sent, delivered to the desired address?

Is the email being sent, blocked by the security engine?

Or is the email quarantined somewhere by the security engine?

Re: what does action=bypass mean for product="Anti-Spam and Email Security"

_Val_ — Wed, 27 Dec 2023 10:03:59 GMT

Can you share a sample log, please?

Re: what does action=bypass mean for product="Anti-Spam and Email Security"

sp_gdi_lab — Wed, 27 Dec 2023 10:12:09 GMT

Here is the sample log

Aug 28 08:54:36 1.1.1.0 time=1693202076|hostname=lab-hostname-sample|product=Anti-Spam and Email Security|action=Bypass|ifdir=inbound|ifname=eth0|loguid={0x64ec369d,0xc5,0xe07fa8c0,0x205ec071}|origin=1.1.1.1|originsicname=CN\=il-dmz-tls-05.sample.com,O\=abc..8ye75g|sequencenum=3|time=1693202076|version=5|dst=1.1.1.2|email_control=Allow List|email_spam_category=Non Spam|proto=6|recipients_number=0|rule=0|s_port=28843|service=25|src=1.1.1.3

Re: what does action=bypass mean for product="Anti-Spam and Email Security"

_Val_ — Wed, 27 Dec 2023 10:44:04 GMT

This log says, your Email security was bypassed because the email belongs to your "Non Smap" list. It was allowed to pass through.

Re: what does action=bypass mean for product="Anti-Spam and Email Security"

_Val_ — Wed, 27 Dec 2023 10:45:14 GMT

Also, it looks to be the sysog entry. What about the actual log it belongs to? Do you have access to SmartConsole to see one?

Re: what does action=bypass mean for product="Anti-Spam and Email Security"

sp_gdi_lab — Wed, 27 Dec 2023 11:56:14 GMT

No, I don't have access to SmartConsole to view the log.

Re: what does action=bypass mean for product="Anti-Spam and Email Security"

_Val_ — Wed, 27 Dec 2023 12:23:54 GMT

In this case, it is advisable to talk to the policy owners then, to understand the logs better, and the policy itself as well.

Re: what does action=bypass mean for product="Anti-Spam and Email Security"

the_rock — Wed, 27 Dec 2023 18:37:19 GMT

As description says, if action is bypass, then nothing was rejected or dropped.

Best,

Andy