Forum Discussion
Zeff Wheelock
Jan 28, 2019Iron Contributor
ATP Attachments and Mail Rules
Tried to do a search to see if this has been discussed before, but did not find any.
When you receive an email with an attachment and have ATP Attachment Scanning with Dynamic Delivery turned on, is there a way in Outlook client mail rules to determine if the mail is currently being scanned so you can add exceptions to the rules? I am hoping that the stub that it puts in "ATP Scanning In Process" (or something like that) can be found in the header of the message so I can have a rule that says:
If recipient is xyz@domain.com
then forward to: abc@domain.com
except if message header "X-Attachment" is "ATP Scanning In Progress"
I guess you can create a rule that checks for the default "Your attachments are being scanned..." text
Pay attention to the list of unsupported scenarios though: https://docs.microsoft.com/en-us/office365/securitycompliance/dynamic-delivery-and-previewing#are-there-scenarios-for-which-dynamic-delivery-is-not-available
- Zeff WheelockIron Contributor
I only see that text in the stub of the attachment and not the subject or body. Is the attachment considered body? Or is there header information that has that information? If header, which one?
No, that's my bad. I was referring to the "run a script" action that allowed us to perform additional inspection/actions, but the fact that this option hasn't been available for few years now skipped my mind. So the only possible way would be to check for the presence of the "placeholder" filename ("atp scan in progress.msg").