File Upload Malware Scanning
To configure anti-malware scanning for file uploads, add the following secrets in the Configuration Manager:
| Key Path | Key Name | Key Value |
|---|---|---|
| kv/<environment>/<application>/app-settings | feature-upload-malware-detection | 1 |
| kv/<environment>/<application>/app-settings | feature-upload-malware-use-remote | 1 |
| kv/<environment>/<application>/app-settings | feature-upload-malware-endpoint | API endpoint |
| kv/<environment>/<application>/app-settings | feature-upload-malware-apikey | subscription-key |
| kv/<environment>/<application>/app-settings | feature-upload-malware-timeout | 30 |
| Key | Description |
|---|---|
feature-upload-malware-detection
|
Set to 1 to enable anti-malware scanning or 0 to disable it. |
feature-upload-malware-use-remote
|
Set to 1 to use a remote scan engine (see below) or 0 to use the local anti-malware engine. The local anti-malware engine is available only for on-premise deployments. For cloud deployments, you can use only the remote scan engine. Default: 0. |
feature-upload-malware-endpoint |
(Remote scan engine only) API endpoint of the remote scan engine. |
feature-upload-malware-apikey
|
(Remote scan engine only) Subscription key for the remote scan engine. |
feature-upload-malware-timeout
|
(Remote scan engine only) Duration in minutes to wait for a response from the remote scan engine before rejecting the file. Default: 30. |
(Deprecated) Add keys in web.config files:
Copy
<add key="feature-upload-malware-detection" value="1"/>
<add key="feature-upload-malware-use-remote" value="1"/>
<add key="feature-upload-malware-endpoint" value="API endpoint"/>
<add key="feature-upload-malware-apikey" value="subscription-key"/>
<add key="feature-upload-malware-timeout" value="30"/>