Topics of this article
About virus protection in DRACOON
- DRACOON offers integrated virus protection that can automatically scan files in selected data rooms for viruses and other malware. DRACOON blocks files detected as infected for further use.
-
The virus protection of DRACOON is not globally active but only in selected data rooms for which the virus protection was explicitly activated.
Virus protection is especially relevant for data rooms where external persons upload files—for example, data rooms to which guest users have access or data rooms where files can be uploaded from outside via file requests. Every file uploaded this way is reliably checked by virus protection (if activated for the data room) and blocked if necessary.
- Virus protection is available to all DRACOON Pro customers who have also booked the optional virus protection package. In DRACOON Premium virus protection is included by default.
- For virus scanning, DRACOON uses the renowned German security provider WithSecure and their Virus-protection-as-a-service product.
- The virus scan includes files up to 256 MB in size and all file types, including zip files and their contents. Files larger than 256 MB are not scanned, but can still be uploaded, shared and downloaded.
- Virus protection is allowed by default but can be globally disabled and blocked by the configuration manager for the DRACOON environment if it is not desired.
- Room administrators can activate virus protection specifically for their respective data rooms if desired by them (unless the configuration manager has globally disabled the use of virus protection).
- Virus protection is unavailable for encrypted data rooms because third parties (including WithSecure as a virus protection provider) generally cannot access client-side encrypted files in DRACOON.
- After activating virus protection for a data room, all files that are already in the data room and have not yet been scanned are automatically scanned for viruses. In addition, all new files in the data room will be scanned automatically as soon as they are uploaded, copied, or moved to the data room.
- Files with determined virus infection are blocked automatically by DRACOON and cannot be opened with DRACOON, shared, or downloaded any longer to prevent further spreading of the files. Infected files are still listed in DRACOON (admittedly with a warning notice) but can only be deleted. The blockade of infected files applies to all DRACOON apps and the DRACOON API.
- The virus scan status can be displayed for each scanned file in DRACOON—scanned files can thus be reliably recognized as such and thus used safely.
- All virus protection-related relevant events are logged by DRACOON. Users with the Auditor role can DRACOON let create a corresponding report, which, for example, documents all virus detections.
Turn on virus protection
Virus protection is turned off by default in a data room and can be enabled as follows:
Activate virus protection for data room (by room administrator)
The room administrator of a data room activates virus protection for his data room in the data room settings.
- Virus protection cannot be activated for encrypted data rooms, as third parties (including WithSecure as the virus protection provider) generally cannot access client-side encrypted files in DRACOON.
- The activated virus protection does not apply to subordinate data rooms. If virus protection is also to be active for subordinate data rooms of the data room, it must be activated separately for each subordinate data room in the respective data room settings.
Virus protection is active and protects files in the data room
Virus protection is now active in the data room. All files already in the data room and uploaded, copied, or moved there in the future (up to a maximum size of 256 MB) are automatically scanned for viruses and other malware and blocked if a virus infection is detected.
Virus scan
Virus scanning of files in a data room
If virus protection has been activated for a data room, all files in this data room are generally automatically scanned for viruses—i.e., all files already in the data room that have not yet been scanned, as well as all files that will be uploaded, copied, or moved to the data room in the future (except files that are larger than 256 MB). The virus scan is performed automatically in the background and even if the DRACOON Web App is not currently open.
Running a virus scan of a file
If a file is being checked for viruses (e.g. immediately after the file has been uploaded), a corresponding note Check for malicious content is displayed below the file in the DRACOON Web App.
Completed virus scan: File is safe, no virus found
After completion of the virus scan of a file without findings, the note Content checked is temporarily displayed below the file in the DRACOON Web App. This lets you immediately see that the file can be used safely.
For the sake of clarity, the Content checked note is displayed only for a short time immediately after the virus scan of the file is completed. If the note is no longer displayed and you still want to know whether the file has been scanned and is safe to use, check the file's virus scan status in the right side pane (see the following section).
Virus detected
If a virus or other malware was detected in a file during the virus scan, the note Malicious content detected is permanently displayed below the file in the DRACOON Web App (unless virus protection was deactivated again in the data room after detection). The additionally displayed note Some functions are not available clarifies that the infected file can no longer be used (such as opened or downloaded) in DRACOON for security reasons but can only be deleted (see below).
Determine virus scan status of a file
If you are not sure whether a certain file has already been scanned for viruses in DRACOON and can therefore be used safely, you can view the virus scan status of the file as follows (provided that virus protection has been activated in the data room concerned):
- Select the file whose virus scan status you want to know.
- If the message Last virus check is displayed in the right side pane and no message Malicious content detected is displayed below the file, the file was checked for viruses in DRACOON at the specified time, and no virus or similar was detected—the file can therefore be considered safe and can be used without risk.
If the message Last virus check is not displayed for a file in the right side pane, the file has not yet been checked for viruses with DRACOON.
The virus protection may not be active in the data room of the file, or the file must still be checked automatically. The latter can be the case, e.g., if the virus protection in the data room was activated only recently and there are many files in the data room currently being checked one after the other automatically. Please wait if necessary, and then display the information of the file again to check its virus scan status.
Infected file: Show details and delete file
A file in DRACOON that was recognized during the virus examination as infected is always marked with the warning note Malicious content detected (if the virus protection was not deactivated afterward in the data room). In this case, additional details about the infected file can be displayed, and the file can be deleted, but for security reasons, no further actions (such as opening, sharing, or downloading) are possible with the file anymore.
To view information about an infected file and delete it from DRACOON:
- Select the infected file.
-
Viewing details about the infected file
Click Show details, or double-click the file.Information about the infected file will be displayed.
-
Delete the infected file
Click Delete in the right side pane. - Confirm the security prompt by clicking Delete.
Infected files are permanently deleted when deleted from DRACOON and are not moved to the recycle bin of the data room. Deleted infected files can, therefore, not be recovered.
Disable and block virus protection globally
If the virus protection in DRACOON should not be used (room administrators should therefore not be able to activate it for their data rooms), virus protection can be globally switched off and blocked by the configuration manager.
Instructions: Disabling and blocking virus protection in DRACOON
Comments
0 comments
Article is closed for comments.