Checkpoint MTA rejects outbound mail

[ANARINE]

Checkpoint MTA --> Internal Exchange Server (incoming works fine)

Internal Exchange Server --> Checkpoint MTA (outgoing to outsiderecipient@gmail.com) Fails

I cant figure out why. Even a telnet test confirms the MTA is rejecting these outside recipients.

CPGW:
Remote Server returned '554 5.7.1 <outsiderecipient@gmail.com>: Recipient address rejected: Access denied'

Is there some way to add the Exchange Server to Checkpoint as a client that can relay to these addresses ?

[Chris_Atkinson]

You may check with TAC but I don't believe this is supported per sk109339.

[ANARINE]

I did come across that article, but why does smartconsole give the ability to scan emails in outgoing direction ?  see attached

[Wolfgang · Accepted solution]

@ANARINE these are two different things, MTA and AntiSpam.

As mentioned by @Chris_Atkinson  you can‘t use MTA for outgoing mail traffic.

Blade AntiSpam can scan incoming and outgoing messages this is independent from MTA. Without MTA you can‘t scan encrypted mail. Only some IP reputation and blacklisting can be done. Nothing of the envelope of a mail message can be checked.

With MTA enabled you can scan all incoming mails and check for bad attachments or links or anything else in the messages. But you cant‘t use your MTA on a Check Point gateway as outgoing hop for mail delivery. 
You can send your mail through the gateway via SMTP protocol from your on premise Exchange directly to the recipients or via another SMTP-relay, but not your gateways MTA.

[the_rock]

I would definitely open TAC case for this.

[Wolfgang]

@the_rock and @ANARINE ther's no need for  TAC. It is how it works. MTA never works as an MTA for outgoing messages.

[the_rock]

Correct @Wolfgang