You could try debugging the in.smtpd and mdq processes. see the following kb article on how to do this.
https://secureknowledge.checkpoint.c....do?id=sk31990 When you say many are being blocked on CP, is the firewall dropping them or are there many mail files in the spool folder(s)?
Also, I haven't seen the security service deliver what is expected to be blocked.