Question
Evonsys (PVT) LTD
LK
Last activity: 2 Apr 2025 14:17 EDT
How to Configure Third-Party Antivirus Scanning for Attachments in Pega?
I am referring to the Pega documentation guide for performing a virus scan on an attachment. It mentions using third-party antivirus software but does not provide details on how to configure it.
-
Does Pega use REST API integration to communicate with the antivirus software, or does it require installation on the server?
-
What are the supported third-party antivirus solutions, and where can I find a detailed configuration guide?
-
If anyone has successfully implemented this, could you share your approach?
Any guidance or reference documentation would be greatly appreciated.
Here is a pega Guide link --> Performing a virus scan on an attachment
Thank you,
Eranda.
Pegasystems Inc.
GB
@Eranda10274 please could you click the 'Feedback' icon on the document itself?
That way it will be logged directly with the team who manage the documentation.
They should be able to find the SME's to answer your question.
Pegasystems Inc.
CA
If you're on Pega cloud, virus check is done by default.
Please find my inline comments,
-
Does Pega use REST API integration to communicate with the antivirus software, or does it require installation on the server? As per the example in the link, it uses the Third party Java library to perform the virus scan during the attachments.
-
What are the supported third-party antivirus solutions, and where can I find a detailed configuration guide? Open source 3rd party java libraries which is secured
-
If anyone has successfully implemented this, could you share your approach?
Updated: 1 Apr 2025 3:03 EDT
Evonsys (PVT) LTD
LK
Hi @RameshSangili,
As per the example in the link, it mentions using a third-party Java library to perform the virus scan. However, based on the provided code snippet:
fi.solita.clamav.ClamAVClient cl = new fi.solita.clamav.ClamAVClient(<Ip Address>, <PortNumber>);
This code specifies an IP address and port number, indicating that the Java library is acting as a TCP client that connects to a ClamAV server running on the specified IP/port (e.g., Proprietary information hidden:3310).
In this case, ClamAV needs to be installed and running on the server first, and the Java library (fi.solita.clamav) simply facilitates communication via a direct socket connection, not REST API.
If I’m mistaken, feel free to correct me!"
Eranda.
Pegasystems Inc.
CA
That's correct.. Java libarry is a blackbox (not sure how the communications are handled)