Share via

ATP issue.

Anonymous
2018-05-16T16:13:11+00:00

Split from this thread.

Hi,

I have similar problem in out tenant: the email from outside the organization (@gmail.com) is not delivered to the shared mailbox.

Status

Office 365 successfully sent the message to the following external address: 

**External address: ****@ourdomain.com

The trace:

5/16/2018 11:38:15 AM

Advanced Threat Protection

Allowed. Advanced Threat Protection Malware: Verdict: Clean, Action: Allowed

5/16/2018 11:38:17 AM

Receive

Message received by: AM0PR05MB4738 using TLS1.2 with AES256

5/16/2018 11:38:19 AM

Receive

Message received by: HE1EUR01TH005 using TLS1.2 with AES256

5/16/2018 11:38:19 AM

Advanced Threat Protection

Advanced Threat Protection Malware: mkk.docx, Type: Word, Environment: , Verdict: Good, Evidence: Unknown

5/16/2018 11:38:19 AM

Send

Message sent to ourtenant.mail.protection.outlook.com at 2********2 using TLS1.2 with AES256

5/16/2018 11:38:20 AM

Receive

Message received by: AM0PR05MB4737 using TLS1.2 with AES256

5/16/2018 11:38:20 AM

Send external

Message sent to eur01.map.protection.outlook.com at 2**********0 using TLS1.2 with AES256

5/16/2018 11:38:20 AM

Defer

Reason: [{LED=420 4.5.0 Unable to bind to Dynamic Attachment message in Mailbox. [Stage: OnPromotedEvent][Agent: Time Travel Control Agent]};{MSG=};{FQDN=DB6PR05MB4742.eurprd05.prod.outlook.com};{IP=};{LRT=5/16/2018 11:38:20 AM}]

5/16/2018 11:38:21 AM

Expand DL

The message was sent to a distribution list (DL) that was expanded to the recipients of the DL.

5/16/2018 11:38:21 AM

Spam

Redirect message. No detail information available.

5/16/2018 11:38:28 AM

Spam

Redirect message. No detail information available.

5/16/2018 11:40:21 AM

Defer

Reason: [{LED=420 4.5.0 Unable to bind to Dynamic Attachment message in Mailbox. [Stage: OnPromotedEvent][Agent: Time Travel Control Agent]};{MSG=};{FQDN=DB6PR05MB4742.eurprd05.prod.outlook.com};{IP=};{LRT=5/16/2018 11:40:21 AM}]

5/16/2018 11:42:22 AM

Defer

Reason: [{LED=420 4.5.0 Unable to bind to Dynamic Attachment message in Mailbox. [Stage: OnPromotedEvent][Agent: Time Travel Control Agent]};{MSG=};{FQDN=DB6PR05MB4742.eurprd05.prod.outlook.com};{IP=};{LRT=5/16/2018 11:42:22 AM}]

5/16/2018 11:44:23 AM

Defer

Reason: [{LED=420 4.5.0 Unable to bind to Dynamic Attachment message in Mailbox. [Stage: OnPromotedEvent][Agent: Time Travel Control Agent]};{MSG=};{FQDN=DB6PR05MB4742.eurprd05.prod.outlook.com};{IP=};{LRT=5/16/2018 11:44:23 AM}]

5/16/2018 11:46:24 AM

Defer

Reason: [{LED=420 4.5.0 Unable to bind to Dynamic Attachment message in Mailbox. [Stage: OnPromotedEvent][Agent: Time Travel Control Agent]};{MSG=};{FQDN=DB6PR05MB4742.eurprd05.prod.outlook.com};{IP=};{LRT=5/16/2018 11:46:24 AM}]

5/16/2018 11:48:25 AM

Defer

Reason: [{LED=420 4.5.0 Unable to bind to Dynamic Attachment message in Mailbox. [Stage: OnPromotedEvent][Agent: Time Travel Control Agent]};{MSG=};{FQDN=DB6PR05MB4742.eurprd05.prod.outlook.com};{IP=};{LRT=5/16/2018 11:48:25 AM}]

5/16/2018 11:50:26 AM

Defer

Reason: [{LED=420 4.5.0 Unable to bind to Dynamic Attachment message in Mailbox. [Stage: OnPromotedEvent][Agent: Time Travel Control Agent]};{MSG=};{FQDN=DB6PR05MB4742.eurprd05.prod.outlook.com};{IP=};{LRT=5/16/2018 11:50:26 AM}]

5/16/2018 11:52:27 AM

Defer

Reason: [{LED=420 4.5.0 Unable to bind to Dynamic Attachment message in Mailbox. [Stage: OnPromotedEvent][Agent: Time Travel Control Agent]};{MSG=};{FQDN=DB6PR05MB4742.eurprd05.prod.outlook.com};{IP=};{LRT=5/16/2018 11:52:27 AM}]

5/16/2018 11:54:28 AM

Defer

Reason: [{LED=420 4.5.0 Unable to bind to Dynamic Attachment message in Mailbox. [Stage: OnPromotedEvent][Agent: Time Travel Control Agent]};{MSG=};{FQDN=DB6PR05MB4742.eurprd05.prod.outlook.com};{IP=};{LRT=5/16/2018 11:54:28 AM}]

5/16/2018 11:56:29 AM

Defer

Reason: [{LED=420 4.5.0 Unable to bind to Dynamic Attachment message in Mailbox. [Stage: OnPromotedEvent][Agent: Time Travel Control Agent]};{MSG=};{FQDN=DB6PR05MB4742.eurprd05.prod.outlook.com};{IP=};{LRT=5/16/2018 11:56:29 AM}]

5/16/2018 11:58:30 AM

Defer

Reason: [{LED=420 4.5.0 Unable to bind to Dynamic Attachment message in Mailbox. [Stage: OnPromotedEvent][Agent: Time Travel Control Agent]};{MSG=};{FQDN=DB6PR05MB4742.eurprd05.prod.outlook.com};{IP=};{LRT=5/16/2018 11:58:30 AM}]

5/16/2018 12:00:31 PM

Defer

Reason: [{LED=420 4.5.0 Unable to bind to Dynamic Attachment message in Mailbox. [Stage: OnPromotedEvent][Agent: Time Travel Control Agent]};{MSG=};{FQDN=DB6PR05MB4742.eurprd05.prod.outlook.com};{IP=};{LRT=5/16/2018 12:00:30 PM}]

5/16/2018 12:02:31 PM

Defer

Reason: [{LED=420 4.5.0 Unable to bind to Dynamic Attachment message in Mailbox. [Stage: OnPromotedEvent][Agent: Time Travel Control Agent]};{MSG=};{FQDN=DB6PR05MB4742.eurprd05.prod.outlook.com};{IP=};{LRT=5/16/2018 12:02:31 PM}]

5/16/2018 12:04:32 PM

Defer

Reason: [{LED=420 4.5.0 Unable to bind to Dynamic Attachment message in Mailbox. [Stage: OnPromotedEvent][Agent: Time Travel Control Agent]};{MSG=};{FQDN=DB6PR05MB4742.eurprd05.prod.outlook.com};{IP=};{LRT=5/16/2018 12:04:32 PM}]

5/16/2018 12:06:33 PM

Defer

Reason: [{LED=420 4.5.0 Unable to bind to Dynamic Attachment message in Mailbox. [Stage: OnPromotedEvent][Agent: Time Travel Control Agent]};{MSG=};{FQDN=DB6PR05MB4742.eurprd05.prod.outlook.com};{IP=};{LRT=5/16/2018 12:06:33 PM}]

5/16/2018 11:38:21 AM

Spam Diagnostics

I am *not* using any Exclaimer.

Microsoft 365 and Office | Subscription, account, billing | For home | Windows

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments

12 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Anonymous
    2018-05-28T10:02:51+00:00

    Hi Lance,

    My mistake: my email address is added not to the group, but in "Redirect attachment on detection: Send the blocked, monitored, or replaced attachment to an email address. 

    " option. So sometimes I get emails (without any explanantion) sent by someone from outside the company to one of our internal users (but the intended recipients get nothing, no warning/info).

    That's the problem. And I want to have the problem fixed, not the ATP scanning disabled.

    Was this answer helpful?

    1 person found this answer helpful.
    0 comments
  2. Anonymous
    2018-05-24T17:18:38+00:00

    This answer is just waste of my time. Yes, I can disable ATP attachment scanning, but I want it working, not disabled.

    I need a solution, not a workaround.

    Was this answer helpful?

    1 person found this answer helpful.
    0 comments
  3. Anonymous
    2018-05-16T21:13:08+00:00

    Bu as I already wrote: "I am *not* using any Exclaimer.", so your advice is useless.

    Was this answer helpful?

    1 person found this answer helpful.
    0 comments
  4. Anonymous
    2018-05-17T11:18:39+00:00

    Hi Rafa_Fi,

    Where did you get the trace? Could you please run a Message Trace and share the result with us?

    For privacy concern, I've sent you a private message to collect the result. Please click the link below to access it:

    https://answers.microsoft.com/en-us/privatemessage/inbox

    Thanks,

    Lance

    Was this answer helpful?

    0 comments
  5. Anonymous
    2018-05-16T20:34:21+00:00

    Hi Rafa_Fi,

    You may try to create Exclaimer rule to bypass attachment scanning until Exclaimer has processed the message to see whether the problem still occurs.

    For your reference: Messages with attachments are not delivered when ATP Dynamic Delivery and Exclaimer are used

    Best regards,

    Shyamal

    Was this answer helpful?

    0 comments