MetaDefender Core Engine

MetaDefender Core now fully integrates with OPSWAT Filescan (as an engine module), and provide two separate engines:

1. OPSWAT Filescan Embedded engine: bundled in MetaDefender Core server, and the engine will process files locally itself.
2. OPSWAT Filescan Remote engine: the engine is supposed to send file requests to another remote OPSWAT Filescan system for processing. Requiring users to provide proper remote OPSWAT Filescan URL and API key.

We need separate MetaDefender Core license key for each engine option (Embedded vs. Remote).

Engine architecture

Scan process result

Engine detailed result

The integration comes with two modes:

1. Inline: working as a part of MetaDefender Core processing workflow (real-time processing). Allowing users to block entire processing based on OPSWAT Filescan engine's outcome and decision.
2. Out of band: working as a part of MetaDefender Core quarantine (post-investigation processing).Providing additional option to analyze quarantined items along with the existing Threat Intelligence technology.

OPSWAT Filescan engine (both Embedded and Remote) provides configurations under workflow rule (for inline mode), and under engine module - Inventory (for out of band mode).