You are viewing limited content. For full access, please sign in.

Question

Question

Forms upload in Laserfiche Cloud- Are forms scanned for malicious links and viruses

asked on May 29

We created a Laserfiche form where clients can  provide us information on the form and attach documents that uploads  directly to  our repository.  Looking for information.  Questions:

  1. Because those documents are entering into the Laserfiche environment are they scanned in anyway for malicious links or viruses?  The majority of documents that are uploaded are pdf.'s.  
  2. What type of protection does a cloud repository have  making sure  a virus doesn't live amounst the documents?
  3. Is there a way to scan the Repository in general?
0 0

Replies

replied on May 29 Show version history

Anti-virus checks usually happen at the browser, workstation, and server level endpoints.

When users download an uploaded file from a user task, the browser can scan for a possible virus, so browser choice is key here.

Same goes for downloading a file from the repository using a browser. If your using the Windows Client it is also possible that Windows Defender still checks the file but using a browser is recommended for countless other security and reliability reasons.

Your server should already be checking the disk for a virus added to the repository via Windows Defender. Unless you use an encrypted volume, files added to the repository are added to the disk in their native format so that virus scanning can check them without issue.

2 0
replied on May 29

Thank you.  We  operate inside of a SOPHOS firewall  with enhanced protection settings when in office or through SOPHOS VPN when remote.  We use encrypted email and email scanning tools which  scan client documents s that  eventuallly end up in the repository.   We are also testing  a software that does ringfencing, network control and cloud control.

To make sure I understand your answer since I was having a hard time understanding at what point  a document uploaded to the repository via a Laserfice Form and workflow goes through is determined safe, should our Firewal and the products I referenced above provide adequate security  since those protect us at the browser, workstation and server level endpoints?  Assuming they are configured properly.

0 0
replied on May 29 Show version history

I am not sure about a "firewall" since that word refers to something that blocks new incoming network traffic requests from one network (or device in the case that each station on the network includes a firewall) to another. A virus is malicious code and this is usually caught by the browser at the point of download or by Windows Defender at the point of upload to the repository (when the file is placed on disk).

If you have a security appliance scanning data as it passes across your network that is fine too, it would add an extra layer of security but has serious performance impacts on your network and can cause apps or services to simply fail when it interferes with the communication of real time services at the point of detecting malicious code.

1 0
You are not allowed to follow up in this post.

Sign in to reply to this post.