Endpoint Protection
Business Suite
Troubleshooting articles
Endpoint Detection and Response
Extended Detection and Response
Exposure Management
Identity Security
Common Topics
Collaboration Protection
Other WithSecure Products
WithSecure Cloud Protection for Salesforce
How to change or transfer WithSecure Business Account two-factor authentication to a new authenticator device?
How to configure Device control where all of USB devices are blocked unless white-listed by its hardware ID.
Unable to change settings in an Elements Endpoint Protection profile in the portal due to the save and publish button being greyed out
How to grant Elements Administration - Identity and Access Management role?
Elements Connector unable to forward logs with error "Message too long"
Error "The package you are installing is outdated" when exporting installer in Policy Manager Console
Client Security or Server Security Firewall rules made with Policy Manager do not work or appear in the Windows firewall
How can I change Polling interval for virus definitions updates in Policy Manager Server?
How to upgrade WithSecure Policy Manager to a newer version on a Windows Server?
How to configure a persistent data storage or volume for downloaded signatures on Atlant ?
After onboarding a new Elements Exposure Management, the Identities view in the Elements Portal does not populate data.
False positive or false negative detection when scanning backported software with Elements Exposure Management
How does WithSecure Elements Vulnerability Management count scanned unique IP addresses?
Some Elements Vulnerability Management scheduled system scan end up with "Terminated" status
When requesting a scan node license in Elements Exposure Management Portal, the error "number of allowed scan node licenses has been reached" is displayed.
How do I submit a large diagnostic file (WSDIAG) via WithSecure Customer Support's Dropzone?
How do I submit a large diagnostic file (WSDIAG) via WithSecure Customer Support's Dropzone?
Browsing Protection extension in Chrome causes all sites to be blocked on first search
How do I submit a large WSdiag diagnostic file via FTP?
Size of the hive.db file under the HiveRoot folder is large and keeps growing on the Windows endpoint client
How to upgrade Cloud Protection for Salesforce and is there a rollback option ?
Unable to assign permission set WithSecure Clould Protection to users. The user license doesn't allow VisualForce Page Access
Eicar test files uploaded as documents to Salesforce are not detected as malicious by Cloud Protection for Salesforce
How to increase the Scan Quota Increase in the Cloud Protection for Salesforce when getting Error monthly scan usage quota limits exceeded ?
Configurable Point of Presence: Set up your data processing region

Eicar test files uploaded as documents to Salesforce are not detected as malicious by Cloud Protection for Salesforce

Issue:

Salesforce stores "documents" in three different objects: ContentVersion (aka Files), Document, Attachment. WithSecure Cloud Protection for Salesforce does not appear to be checking Documents uploaded via API or Manually. It is testing ContentVersion and Attachment.

Resolution:

This is by design. WithSecure Cloud Protection for Salesforce only scans files stored as ContentDocument / ContentVersion and Attachment objects. We do not plan to add support for Document objects as Salesforce told us earlier that they would discontinue this file storage in the future. In the long-run, Salesforce plan to have only one file storage based on ContentDocument / ContentVersion objects, which provide better security and usability.