cancel
Showing results for 
Search instead for 
Did you mean: 
Create a Post
Highlighted

Attachments renamed as ATT00001 - Threat extraction and Office365

Hey guys,

Did anyone have an issue of attachments arriving named as ATT00001.bin after enabling Threat Extraction with "Clean all" option?

I have a case open with TAC, but until I managed to get a remote session with both my O365 admin and TAC I wanted to know if anyone knows anything about this.

Attachments first with the correct name according to CloudGuard SaaS logs, thus restoring the email restores the correct attachment. Changes occur during or after extraction.

I know it is microsoft that renames the file this way, I'm just trying to understand what is causing it.

Thanks

0 Kudos