topic OneDrive/SharePoint protection not working in Email and Collaboration

OneDrive/SharePoint protection not working

RS_Daniel — Wed, 11 Mar 2026 18:36:02 GMT

Hello community,

We are currently testing Harmony Email & Collaboration (HEC) protection for OneDrive and SharePoint with a new customer and had some problems so we would like to know if anyone has successfully validated this functionality and could share their experience.

According to the administrator guide, Harmony Email & Collaboration scans files in the following scenarios:

A new file is created
A file is uploaded
A file is modified (edited)
A file or directory is shared with new members

During our testing we are experiencing inconsistent results.

We performed multiple tests by creating, uploading, modifying and sharing files in both OneDrive and SharePoint. Some of these files contained:

known malicious URLs used for phishing testing
malware test files used for security validation

In some tests we also used EICAR test files. However, in those cases Microsoft detected and blocked the files before Harmony Email & Collaboration could process them, so they were not useful for validating the HEC detection workflow.

Another observation is related to logging and file visibility in the scanned files list. In several cases it takes 30–40 minutes for files to appear in the scanned files list, and sometimes newly uploaded files do not appear at all. This behavior also occurs in the cases where Microsoft blocks the EICAR files.

Because of this, it sometimes appears that HEC is not detecting or processing all file events in OneDrive and SharePoint.

We would appreciate any insight regarding the following:

How long should it normally take for newly uploaded or modified files to appear in the scanned files list?
Are there any known reasons why some files might not appear in the scanned files list at all?
Are there any recommended methods or best practices for testing HEC protection for OneDrive and SharePoint?

Any help is appeciated.

P.S. Yes, support case already open with TAC 🙂

Thank you in advance.

Re: OneDrive/SharePoint protection not working

the_rock — Wed, 11 Mar 2026 18:55:20 GMT

Tagging @lluner .

Re: OneDrive/SharePoint protection not working

lluner — Thu, 19 Mar 2026 01:52:07 GMT

@the_rock

I have no expertise in this product.

Re: OneDrive/SharePoint protection not working

the_rock — Thu, 19 Mar 2026 01:55:54 GMT

K, fair enough. I thought of you when I saw this post, so thats why I tagged you.

Re: OneDrive/SharePoint protection not working

PhoneBoy — Thu, 19 Mar 2026 14:58:44 GMT

@rlopes maybe you have an idea here

Re: OneDrive/SharePoint protection not working

rlopes — Thu, 19 Mar 2026 15:31:31 GMT

Looks like a HEC topic, not SASE.

Re: OneDrive/SharePoint protection not working

PhoneBoy — Thu, 19 Mar 2026 17:04:40 GMT

Sorry about that.

Re: OneDrive/SharePoint protection not working

RS_Daniel — Fri, 08 May 2026 12:55:37 GMT

Just to let you know, apparently it was a problem with the integration between HEC and sharepoint/onedrive. TAC took a little while but RnD team fixed the issue.

Regards