Can the Continue-and-Forward Action be Used for SMTP Traffic?

Can the Continue-and-Forward Action be Used for SMTP Traffic?

17563
Created On 09/26/18 13:53 PM - Last Modified 06/08/23 08:59 AM


Resolution


SMTP is not a protocol that supports user interaction. The continue-and-forward works with HTTP because the firewall can present the user with a policy page and a continue button, but SMTP traffic doesn't originate from the user. Once a user has clicked the Send button in Microsoft Outlook for example, the email is sent to the local server using the MAPI protocol. The server then opens an SMTP connection to the destination server to relay the message.

When an SMTP connection is configured to continue-and-forward, the firewall returns an SMTP 5.4.1 error message and closes the connection (same behavior as if the policy was configured to block).

Continue-and-Forward should not be used for SMTP traffic as the protocol doesn't support user interaction

owner: rvanderveken
Other users also viewed:
Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClxoCAC&lang=en_US%E2%80%A9&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Choose Language