Firewall blade log action bypass

[Ihenock1011]

Hi All,

we have checkpoint r81.10 security gateway and I see logs for the firewall blade with action "bypass" can you please explain this for me I taught bypass is for the https blade ?

Thanks

[796570686578]

Good question, I just checked some customers logs and could see that smtp/pop traffic is bypassed. Is it smtp/pop traffic in your case as well?

[Ihenock1011]

Yes It is SMTP Traffic.

[Chris_Atkinson]

SMTP(S) i.e. TLS per sk98973?

[Lesley]

This is the correct SK for this question. I have the same with my customers. 

[the_rock]

I agree with Phoneboy...if you attach a log itself, would definitely help.

Andy

[PhoneBoy]

Posting a screenshot of the full log card with sensitive details redacted might be helpful.