Dynamic delivery and previewing with Office 365 ATP Safe Attachments

Dynamic delivery is an option that can be selected for ATP Safe Attachments policies. Read this article to learn about dynamic delivery and attachment preview capabilities in ATP Safe Attachments in Office 365.

How dynamic delivery works

When you set up ATP Safe Attachments policies in Office 365, you can choose from several options, such as Block, Replace, and Dynamic Delivery. (See Learn about ATP Safe Attachments policy options.) Depending on how your policies are configured, email recipients can experience a minor delay in email delivery while their attachments are scanned. To avoid message delays, choose Dynamic Delivery.

The dynamic delivery option eliminates email delays by sending the body of an email message through with a placeholder for each email attachment. The placeholder remains until the attachment is scanned by ATP Safe Attachments in Office 365. Email recipients can read and respond to their email messages right away, knowing that their attachments are being analyzed.

Most PDFs and Office documents can be previewed in safe mode while ATP scanning is underway. If an attachment is not compatible with the dynamic delivery previewer, email recipients see the attachment placeholder until ATP Safe Attachments scanning is complete.

As each attachment is cleared, it is automatically reattached to the original email message. If an attachment is determined to be malicious, it is sent to quarantine, where an Office 365 global administrator or security administrator can manage quarantined messages in Office 365.

What happens when someone forwards an email that contains an attachment?

Suppose that an organization is using dynamic delivery for their ATP Safe Attachments policy, and someone receives an email that contains an attachment. Now suppose that person is about to forward the email message to someone else. What happens? It depends on whether the additional recipients are included in ATP Safe Attachments policies.

  • If a recipient is covered by an ATP Safe Attachments policy using the dynamic delivery option, then the recipient sees the placeholder, with the ability to preview compatible files.

  • If a recipient is not covered by an ATP Safe Attachments policy, then the email and attachment will go through, without ATP Safe Attachments scanning or attachment placeholders.

What's required for dynamic delivery to work?

Are there scenarios for which dynamic delivery is not available?

There are certain scenarios in which dynamic delivery is not supported. These include the following:

  • Email messages that are in public folders

  • Email messages that are routed out of and then back into the user's mailbox using custom rules

  • Messages that are moved (automatically or manually) out of the hosted mailbox and into other locations, including archive folders

  • Messages that are deleted

  • A user's mailbox search folder that is in an error state

  • Environments in which an Exchange Online admin has enabled Exclaimer. (See Messages with attachments are not delivered when ATP Dynamic Delivery and Exclaimer are used)

Related topics

Office 365 Advanced Threat Protection
ATP Safe Attachments in Office 365
Set up ATP Safe Attachments policies in Office 365
ATP Safe Links in Office 365

Expand your Office skills
Explore training
Get new features first
Join Office Insiders

Was this information helpful?

Thank you for your feedback!

Thank you for your feedback! It sounds like it might be helpful to connect you to one of our Office support agents.