Device Endpoint Security works by scanning all incoming messages and emails for potential malware threats. If a message contains one of these threats, the system will automatically remove the threat before allowing you to read the message. The exact process applies to attachments sent via email.