How to integrate with McAfee Anti-Virus system in APIGEE?

[ramyagullapalli]

If I need to scan the attachments for proxy service to check any virus/ Threats in the attachment using Antivirus. for the I need to integrate with Anti Virus system. Can any one have any idea on this? Please help me to understand how to integrate this.

[DChiesa]

Other customers who do this, follow this pattern:

1. save the attachment as a file in some staging area. Like a BaaS Asset or in aa GCS bucket, or etc.
2. send the attachment via API to the virus scanner
3. observe the result of the scan (this result may be asynchronously delivered)
4. Based on that result, delete the file, or transmit it back to whatever system it needs to go to.

If your anti-virus scanner can return the result of a scan synchronously, then you don't need to "save" the file anywhere. Just invoke the scanner API using ServiceCallout, and then interpret the result in the rest of the proxy flow.

This isn't any different than any other ServiceCallout implementation. The only special thing is, in this case you need to duplicate the request content in the inbound request, to the request content sent to the ServiceCallout. But that's easy, with AssignMessage.

[ravirajthakur]

Thanks for your comments on this Dino. I was evaluating this use case for one of my implementations and was exploring the best place to get this scanning done that is more secure and performance friendly approach. What are your thoughts on activating this scanning functionality on the perimeter of the network at Firewall or loadbalancer instead of APIGEE/API Layer ?

[dchiesa1]

Hi Ravi

I think it's maybe prudent to do it at multiple layers. In some cases the firewall or network edge system may be able to introspect the traffic and perform the scanning. In some cases your API call payload may carry files, and this may not be apparent to an firewall. So you'd need to do it in both places in order to be protected.

Just my opinion. This may not apply in your scenario if you don't send files within APIs, or if you don't want to allow that.

[iamasim04]

Hi @dchiesa1 Could you suggest any code snippet example for the same using ServiceCallout ? 

Thanks.

[dchiesa1]

Can you be specific about what you are asking for? 

[iamasim04]

Hi @dchiesa1 

Could you please give an example of invoking the scanner API using Java ServiceCallout and interpreting with the response.