Using OOTB Pega Cloud antivirus scanning for attachments uploaded in Constellation

User Experience Knowledge Share
, ,
1

Hello Everyone,

Organizations using Pega Cloud can use the platform-managed, out-of-the-box antivirus scanning capability for attachments, even when they do not have a custom antivirus service or integration.

As documented in Anti-virus on Pega Cloud, attachments uploaded through standard Pega attachment flows are scanned for malicious content. Files identified as unsafe are quarantined and cannot be accessed.

We validated this behaviour using the harmless, industry-standard EICAR Anti-Malware Test File:

What is EICAR?

We used the EICAR Anti-Malware Test File, which is a harmless industry-standard file designed specifically for antivirus testing. It does not contain actual malware and cannot infect a system. Antivirus products recognise its test signature as malicious content. Once you save the file with the content provided by EICAR, the file will stay in you disk for about a minute or so, because your One Drive or you windows default antivirus product might delete it from the disk and quarantine it. So, you need to be quick to test this functionality once you save this file.

If you ask Co-pilot for EICAR file content, it will provide you a sample content which can saved into a file named sample.png.

  1. The EICAR file was uploaded through User Portal > Case > Utilities > Attachments.
  2. The file was uploaded to the repository and appeared in the case attachment list.
  3. Pega Cloud detected the EICAR signature and quarantined the file.
  4. When the attachment was opened, Pega blocked access and displayed the following OOTB message:

ā€œMalicious content detected in ā€˜sample.pngā€™. Pega Platform has quarantined the file. Please ensure a clean file is uploaded.ā€

image

This confirms that Pega Cloud customers can use the OOTB repository-level antivirus scanning and quarantine functionality for attachments uploaded through standard Pega attachment flows, without implementing a separate custom antivirus service.

If you are storing your attachments in Pega Database, you need to depend on your Organizationā€™s virus check service that can be implemented using the extension CallVirusCheck activity.

Hope this helps

Regards

JC

4 Likes