MTA email data missing from logging

[Eric_Lindsey1]

We are using our checkpoint appliance as an MTA. External email is directed to checkpoint and then to our internal email servers. We are also threat emulating attachments. If an email comes into the system and passes through checkpoint with no attachment we do not see any of the email data in the smartlog. If the email has an attachment and threat emulation emulates the file we see the subject, sender, receipient in smartlog. Is there any reason the normal email just passing through the appliance does not show in smartlog?

[PhoneBoy]

I believe we only log emails we act upon (e.g. with Threat Emulation/Extraction).

[Dror_Aharony]

from R80.20, the new MTA blade does log all Emails (even without attachment inspection).

Are you using the new MTA blade?