The SBC authenticates ingress leg before the request is processed. If no credentials (in Authorization header field) are provided in the request, the SBC challenges the request to provide credentials by rejecting it with a 401 or 407 response.
The SBC relays BYE, 401/407 response to a BYE request from one leg to another leg without tearing down the call.
On the leg respective to the BYE request, if the BYE Challenge indication is enabled, challenge related headers/parameters present in the BYE request are passed through SBC. Any credential related headers/parameters are passed through in the corresponding response message.
When the response for a BYE request is received, the dialog is torn down regardless of the response value.