topic Re: CHECKPOINT SMTP BYPASS LOG in General Topics

CHECKPOINT SMTP BYPASS LOG

Prime — Mon, 20 Sep 2021 09:29:24 GMT

We are receiving the below logs stating that "SMTP traffic bypassed" . Could you please confirm what is exact action on this log whether the generated SMTP traffic is allowed or dropped.

Re: CHECKPOINT SMTP BYPASS LOG

Prime — Mon, 20 Sep 2021 09:35:26 GMT

Re: CHECKPOINT SMTP BYPASS LOG

the_rock — Mon, 20 Sep 2021 12:47:26 GMT

Maybe others can confirm, but Im 99% sure that sort of log means traffic is indeed accepted and not dropped.

Re: CHECKPOINT SMTP BYPASS LOG

G_W_Albrecht — Mon, 20 Sep 2021 13:13:28 GMT

@the_rock is correct - this log means that traffic has bypassed https inspection successfully.

Re: CHECKPOINT SMTP BYPASS LOG

Prime — Fri, 24 Sep 2021 06:24:56 GMT

I am still unable to understand the difference why for a same Source and Destination IPs we are able to see in logs few lines as accepted and few as bypassed. Please clarify us the difference if any on logs accepted and bypassed.Source IP : 10.69.21.10
Destination IP : 142.251.10.27
Port : SMTP 25

Re: CHECKPOINT SMTP BYPASS LOG

G_W_Albrecht — Thu, 14 Mar 2024 15:05:51 GMT

Please ask CP TAC !