We have a public facing form on our forms portal that is sitting on a DMZ server. I would like to add the ability to upload an image file utilizing laserfiche's file upload field. I know that i can set size, number of files and extension restrictions on the field, which is great but I'm wondering does laserfiche also so any scanning of the file for malicious intent or malware? I'd like for everything (form and attachment(s)) to get archived directly to our repository, but I'm weary of doing this for attachments on a public facing form that is not behind any kind of authentication.
Question
Question
Does Forms Portal do any kind of security scanning of uploaded files?
asked on June 30, 2020
•
Show version history
0
0
Replies
replied on June 30, 2020
No, it doesn't do any additional security scanning out-of-the-box. With the recent release of Forms 10.4.4, you will be able to store file uploads on the form into a system folder outside of the Forms database. It was thrown out by a few SPs that you could set up an anti-virus scan on those file folders, and only move the uploads to the repository after they had been scanned.
0
0
replied on September 20, 2021
Hi Jared,
What would happen if an Anti-Virus flags a file as suspicious or as containing a virus? Normally such a file is quarantined?
1. How will Forms know about this?
2. How will the user know about this in order to take remedial action i.e. upload another file etc.?
0
0
replied on May 13, 2022
Here's a link to the Forms Virus Scan integration that's available for purchase from CDI.
1
2
You are not allowed to follow up in this post.