How does the Pega platform scan attachments prior to upload to validate any malicious content?
Here is a question from a government client:
Q. How does the Pega platform scan attachments prior to upload to validate any malicious content?
Accepted Solution
Updated: 5 Aug 2024 8:11 EDT
Pegasystems Inc.
US
@Will Cho Have also found this - https://docs.pega.com/bundle/pega-cloud/page/pega-cloud/pc/anti-virus-on-pega-cloud.html, which seems to contain what client needs.
File and attachment uploads
- Protected? - Yes, for standard upload flows that use the out-of-the-box Pega file attachment rule. Client-created custom upload flows are not protected.
- Response to flagged file - Quarantined
- What will a user see if a file they upload is flagged by Pega’s Anti-Virus? - Pega Platform will display an error message such as, “Unable to get the file from repository. There was issue with the file path or repository configuration/connection.”
Updated: 2 Aug 2024 10:53 EDT
Pegasystems Inc.
GB
@Will Cho At the moment the documentation I found does not go into sufficient detail: Pega 8.8:
We have an open Enhancement Request for this feature: FDBK-20857 (Virus check for files being uploaded)
We do not yet have the workaround documented (although we have something similar written for How to restrict File Attachments by file type [SDR-94]" ) but attached you can find a possible solution for your client.
I was led to believe that there are plans for the main Case Management documentation to cover this feature in the future (via US-367584-1) but my search has led to a dead-end.
@Jan Biskup @LeonBrown @AZHAM I believe you were involved in getting this functionality documented in the Product Help - do you have any update for us?
cc @potlv
Accepted Solution
Updated: 5 Aug 2024 8:11 EDT
Pegasystems Inc.
US
@Will Cho Have also found this - https://docs.pega.com/bundle/pega-cloud/page/pega-cloud/pc/anti-virus-on-pega-cloud.html, which seems to contain what client needs.
File and attachment uploads
- Protected? - Yes, for standard upload flows that use the out-of-the-box Pega file attachment rule. Client-created custom upload flows are not protected.
- Response to flagged file - Quarantined
- What will a user see if a file they upload is flagged by Pega’s Anti-Virus? - Pega Platform will display an error message such as, “Unable to get the file from repository. There was issue with the file path or repository configuration/connection.”