> Source: [sk114664](https://support.checkpoint.com/results/sk/sk114664)

# sk114664 - Mail Transfer Agent (MTA) protection bypass

| Property | Value |
|----------|-------|
| Solution ID | sk114664 |
| Date Created | 2016-11-24 |
| Last Modified | 2020-11-19 |
| Technical Level | General |
| Products | Security Gateway |
| Versions | R82.10, R82, R81.20 |
| OS | Gaia |

## Symptoms

- Malware manages to evade Threat Emulation mail protection.

## Cause

An evasion was identified that may bypass MTA (Mail Transfer Agent).

## Solution

This problem was fixed. The fix is included in:

* [Check Point R80.10](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk111841)
* [Jumbo Hotfix Accumulator for R77.30](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk106162) - since *Take_189*

For **other [supported](http://www.checkpoint.com/support-services/support-life-cycle-policy/index.html) versions** , [Check Point Support](http://www.checkpoint.com/support-services/contact-support/index.html) can supply a **Hotfix** .  
A Support Engineer will make sure the Hotfix is compatible with your environment before providing the Hotfix.  
For faster resolution and verification, please collect [CPinfo files](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk92739) from the Security Management Server and Security Gateways involved in the case.

**Notes:**

* Hotfix has to be installed only on Security Gateway configured as Mail Transfer Agent (MTA).
* Depending on the currently installed hotfixes, it might take some time to prepare the hotfix for your specific environment.
* Details about this evasion were not provided to protect the customers, who did not install this hotfix yet.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content