Advanced Threat Protection and Dynamic Delivery of emails
With Dynamic Delivery, email is delivered with a provisional attachment that indicates that the original attachment is being scanned by ATP and will be delivered soon. If this email if forwarded before the original attachment is released by ATP, the recipient of the forwarded email will receive the provisional attachment and never see the original attachment once released to the first recipient.
This is a problem for business where many executives on the move use mobile phones to routinely forward emails to team members for follow-up. We also have users who setup Outlook rule that forward emails to other users.
The system should be so setup that if an attachment to a Dynamic Delivery email is being subject to ATP scanning, the l emails should be locked from being forwarded till the original attachment is released or at the least a popup should warn the user that the email is being sent without any attachment. Outlook rule based forwarding of emails should happen only after the original email attachment is released by ATP.
Our users have rules set up that move their email to a PST file or Exchange Online. But if it has an attachment on it, the email gets moved before the ATP Scan has completed. Other than deleting the rule (which is not a great solution), we don't have a good fix for this. Is Microsoft doing something? Or do they have a recommendation on a better practice?
Court B commented
I am seeing this same thing happen still. has there been a fix for this yet?
Vijayakumar S commented
ATP Safe Attachment with Dynamic Delivery option is not working as expected along with Outlook client rules which created for moving email to different folder.