This is a known issue with Microsoft APIs and it is not specific to the Check Point Solution.
The Sandblast Cloud is using the quarantine folder temporarily until emulation is complete and later on the mail is moved to inbox folder. Microsoft is failing to not re-indexed upon folder move and since these items belonged to a hidden folder, which is not part of content indexing, this item was never indexed.