This reports whether DLP inspection is currently bypassed (fail-open) for some or all traffic, for example automatically during a resource-overload condition to keep mail flowing rather than blocking it. This matters as a compliance and security signal, not just a performance one: while bypass is active, sensitive-data exfiltration attempts are not being caught at all, so admins need to know this immediately rather than treating it as routine telemetry. For example, the value might read 'Bypass: Active - CPU overload', meaning confidential data could be leaving unchecked right now.