The decision to incorporate a bypass code into your security policy is optional. When included, a bypass code has no direct effect on networks, DNS forwarding proxies, or endpoints. Its behavior depends on how it is configured. Bypass codes are effective only when used with the Block-Redirect action, which is the sole method of interacting with the DNS response. For more information, refer to Using Bypass Codes.
To Configure Bypass Codes for a Security Policy:
...