Integrating Titan Server with AntiVirus Solution

Integrating Titan Server with AntiVirus Software

Question

How do I make use of the AntiVirus functionality of Titan Server?

Reasoning

I would like my Titan Server to be able to utilize an existing AntiVirus solution.

Answer

Titan Server can be integrated with existing AntiVirus solutions that support an ICAP interface like Titan ICAP Server. The AntiVirus feature allows an administrator to set up and leverage the automated virus scanning utility within Titan.  This feature supports ICAP (Internet Content Adaptation Protocol) to provide ad hoc AntiVirus scanning. The built in ICAP client adheres to RFC 3507 and is compatible with industry standard AV servers that support ICAP. When configured and enabled, this feature allows Titan Server to scan files uploaded to the server. If you do not currently have an AntiVirus solution and would like one, consider Titan ICAP Server, available in cloud marketplaces (Azure, AWS, GCP), and a link to a cloud listing exists within the configuration portion of the Titan Server.

Pre-requisites

1. Titan Server must be installed on the system and available for use

   1. Valid Administrator Credentials are required to make changes within Titan

2. AntiVirus solution must offer an ICAP interface

   1. Gather connection information: specifically, the External AntiVirus Scanner URL and Port Number

   2. Specify Scanner URL as IP Address or Hostname. Default

      Port is 1344

Steps

1. Open the Titan Administrator and login using valid credentials

2. Navigate to the Security menu of Titan Server, and then select the “AntiVirus” tab

3. Check the box to Enable AntiVirus scanning. If requiring an AntiVirus solution, choose "Click Here" option to learn about Titan AV Server.
   

4. Enter valid connection information for the AV Scanner URL and Port

   1. Specify Scanner URL as IP Address or Hostname. Default Port is 1344

5. Choose whether to have real-time scanning of all files uploaded to Titan

   1. Enabling “real-time scanning of incoming files” results in scanning all uploaded files

   2. Disabling “real-time scanning of incoming files” allows for using Events automation to decide when specific files should be scanned

6. Choose what action Titan Server should take upon encountering an infected file. The options are Delete, Allow or Quarantine. If this setting is set to Quarantine, the quarantined files will be moved to the specified AV Quarantine Directory set under the Directories tab of Files/Directories.

   1. Delete: Deletes the file to prevent upload to Titan Server

   2. Allow: Allows the file to continue upload to Titan Server

   3. Quarantine: Files will be moved to the specified AV Quarantine Directory set under the Directories tab of Files/Directories within the Titan Server configuration