Email attachments not detected by Network Prevent for Email, when the MIME structure of messages is not RFC-compliant.
This is not common, but is more likely to occur in "edge issues" - such as when the IBM Traveler app (a mail client for Notes clients) is installed on mobile devices, and is used to forward messages that originated from 3rd party mail clients (i.e., not Microsoft!).
N/A - as the content is not detected, there are no errors in DLP logs
A properly formatted SMTP message that is RFC-compliant may be composed with the following structure:
In the above example, DLP will examine both the multipart/alternative and the application/octet-stream parts - and is able to detect any content that is solely present in the attachment.
Whereas a message that is not RFC-compliant may be sent in a format as per this example:
In the above example, DLP will only examine the first sub-type ("text/plain") - assuming, based on the "alternative" typing at the initial boundary, that any subsequent sub-structure will include the same content. The non-compliant message above does not do that, therefore DLP does not examine or inspect the attachment - we are literally not "seeing" it.
If DLP doesn't detect the message owing to its MIME structure as per the examples above, you may be required to contact your mail or application vendor, to confirm any known issues with the behavior of their mail clients.