Understanding the Office 365 Scan Details
search cancel

Understanding the Office 365 Scan Details


Article ID: 225054


Updated On:


CASB Security Advanced CASB Securlet SAAS


Why do I have failed files in the scan details of the Office 365 Securlet?


Office 365 Securlet


The failed column represents:

  • Documents that were deleted or locked whe the scan took place.  (We will retry failed files).
  • Files that are > than 30 MB are not sent to DLP.
  • Files marked to be retried because of throttling,429 error.

The failed files column will fluctuate with a sudden increase of new files to be scanned or as files are deleted or modified.

  • Failed files are retried daily for 30 days.
  • Files greater than 30 days will not be re-scanned. 

If you find a large number of failed files reported that have not cleared up over time, create a support ticket asking for details regarding these files such as:

  • the number of non-recoverable files
  • asking for a re-scan of failed files >30 days.

A re-scan may not touch these files as only exposed files will be re-scanned and only for 30 days for email.

Remaining files includes files not matched by the DLP Scanfilter (Application Detection).  Because of this there will most likely always be files remaining to be scanned.




Additional Information

A feature has been requested to break down failed files in greater detail.