Skip to main content

Security - Anti-Malware Protection

Updated over 2 months ago

For increased security, documents uploaded to Coins ERP+ are automatically checked for viruses. By default, ClamAV (www.clamav.net) is used; this will be installed for hosted customers.

The details below have changed in response to a security update in v12.02.

If ClamAV is not installed, users will be prevented from uploading or viewing documents.

To use an alternative anti-malware protection, create a script file called avscanfile.cfg in the var/vault directory. If the file is found in the vault, it will be used. If not, the default clamdscan Linux command will be used.

To override the default clamAV command, for example to scan a file with Sophos, below is an example of the contents of avscanfile.cfg where &(1) will be replaced with the name of the file to scan.

0 CMD AVSCANFILE "savscan -s &(1) >/dev/null; echo $?"

The above executes the command line to scan a file with the anti-virus software of your choice and returns the status code by means of echo $?

To disable anti-malware protection, put echo 999 in the script file:

0 CMD AVSCANFILE "echo 999"

You might do this if you are confident that all endpoints (for example, PCs that access Coins ERP+) are secure.

Did this answer your question?