Multi-Scanning and Data Sanitization
Integrating MetaDefender Core
To integrate MetaDefender Managed File Transfer with Metadefender Core, follow the instructions in the Integration with MetaDefender Core guide.
Integration with MetaDefender Core provides:
- Anti-malware multi-scanning
- Data sanitization (CDR)
- Data Loss Prevention (DLP)
- Vulnerability information
- Sandbox capabilities
- Additional security features
Configuration of MetaDefender Core is done through the MetaDefender Core Management Console and requires purchasing, installing, and configuring MetaDefender Core.
Note that this user guide does not cover MetaDefender Core configuration steps; see the MetaDefender Core User Guide for details.
Viewing Scan Results for Files
Users can view scan results from the "My Files," "Shared with Me," "Processing History," "Approval History," or "Pending Approval" pages by clicking on any file. The scan result from MetaDefender Core will be shown in a new browser tab.
Data Sanitization (CDR)
Content Disarm & Reconstruction (CDR), also known as data sanitization, treats all files as potentially malicious. It sanitizes and rebuilds each file, ensuring full usability with safe content. For more details, refer to the MetaDefender Core documentation.
After a file is processed by MetaDefender Managed File Transfer, it will be in the "Sanitized" state.
The MetaDefender Core scan result indicates that the file has been sanitized:
Administrators and supervisors can choose between the original and sanitized versions of the file when downloading. For regular users, the redacted file is downloaded automatically.
Data Loss Prevention (DLP)
The Proactive DLP engine detects and blocks sensitive data, such as credit card numbers and social security numbers. It supports a wide range of file types, including Microsoft Office documents and PDFs. For more information, refer to the MetaDefender Core documentation.
The user can download a redacted file with sensitive information masked, while the structure of the document remains intact. This feature leverages the Proactive DLP module from MetaDefender Core and works even if sanitization (Deep CDR) is not configured.
After the files are processed by MetaDefender Managed File Transfer, they will be in "DLP processed" state.
Sensitive data identified in the file will be displayed on the scan result page.
Administrators and Supervisors can choose between the original and redacted versions of the file when downloading. For regular users, the redacted file is downloaded automatically.
If both Deep CDR and DLP modules are enabled, the file will be in "Sanitized" state, and the processed file will be both sanitized and DLP-processed.
MetaDefender Managed File Transfer sends the logged-in user's username and email address as "metadata" to MetaDefender Core, allowing the configuration of custom watermarks with ${vault_user_ name} and ${vault_email_ address} variables in the Proactive DLP process. For more details, see the Proactive DLP watermark documentation.
Sandbox
The OPSWAT Sandbox engine in MetaDefender Core uses Adaptive Threat Analysis (ATA) to scan files for threats. For more information, refer to the MetaDefender Core documentation.
If a file is scanned by the Sandbox, the MetaDefender Core scan result will indicate that no threats were detected.
