Virus Scanning on uploaded file to Azure Block Storage via Azure Web App as of 2020

Question

My project needs to perform virus scan on uploaded files via Azure AppService web app. Files will be stored in Azure Block Storage if they are cleaned. Otherwise, they are rejected to users.

My question: How should I implement this, does Azure provide built-in anti-virus scan?

https://stackoverflow.com/questions/32567922/virus-scanning-uploaded-files-from-azure-web-worker-role

Answer 1

Azure does not provide built in virus scanning for Azure Blob storage. If you require this you will need to implement a solution yourself.
There are third party products such as Sophos and Trend that can do this for you, or you can create something yourself using tools like Azure Functions or Azure Container Instances, here is an example of this.

Answer 2

@PingpongSet At this moment, this option isn't available . You'd may use 3rd party or build one yourself. In the future, you'll be able to use https://learn.microsoft.com/en-us/azure/security-center/threat-protection
You can look into Threat protection for Azure Storage article

Configure advanced threat protection for Azure Storage : Advanced threat protection for Azure Storage provides an additional layer of security intelligence that detects unusual and potentially harmful attempts to access or exploit storage accounts. This layer of protection allows you to address threats without being a security expert or managing security monitoring systems

There is a bit older thread "Virus Scan File Uploads Using Multi-Container Web App", which ca help you in this scenario and provide some idea.

If you are looking out for this feature, If you wish you may leave your feedback here All the feedback you share in these forums will be monitored and reviewed by the Microsoft engineering teams responsible for building Azure.

Disclaimer: This response contains a reference to a third-party World Wide Web site. Microsoft is providing this information as a convenience to you. Microsoft does not control these sites and has not tested any software or information found on these sites; therefore, Microsoft cannot make any representations regarding the quality, safety, or suitability of any software or information found there.
There are inherent dangers in the use of any software found on the Internet, and Microsoft cautions you to make sure that you completely understand the risk before retrieving any software from the Internet.

Hope this helps! Kindly let us know if the above helps or you need further assistance on this issue.

-------------------------------------------------------------------------------------------------------------------------------------------------------------------

Please don’t forget to "Accept the answer” and “up-vote” wherever the information provided helps you, this can be beneficial to other community members.

Answer 3

There is an open source solution my team implemented, you can check it out here: azure-storage-av-automation

Answer 4

Did anyone find a way out to have a layer of virus/malware/trojan scan before a document is uploaded in Microsoft Blob Storage? I see this thread is a couple of years old and hence wanted to check if MS has released any API which can be integrated to check before anything is stored in blob storage.

Thanks.
Saurabh