Issue

When attaching a file to the Pega Platform using out-of-the-box functionality, virus scanning is not performed.

Steps to reproduce

1. Create a case type.

2. Create a case of that case type.

3. Add an attachment to the case.

Root Cause

This behavior is consistent with the current design of Pega code or rules.
The Pega Platform does not provide direct virus scanning functionality.

Suggested approach

An extension point activity CallVirusCheck is provided to create your own virus scanning implementations. This activity runs while uploading a file and it can be customized to integrate with your preferred virus scanning tools.

References

• Performing a virus scan on an attachment
• Security Checklist when deploying in on-premises environments
• Security Checklist when deploying on Pega Cloud