This is a configuration issue. At times it may be nessessary to change the configuration of the detction server to be able to properly parse messages and get attachments.
On 14.X use the following solution:
On 15.x use the following solution:
Note: If using a blocking rule it is normal to see up to four incidents. Each incident comes from gmail retrying to upload the document.