This counter measures the number of packets that were integrity-protected (MACsec authenticated) but not encrypted as they left the transmit secure channel. Network security operators monitor this metric to verify authentication policies are working correctly and to identify if encryption is being applied or bypassed as configured. A high count of protected-but-not-encrypted packets might indicate intentional authentication-only configuration or a policy exception.