Scan Files for Malware in Salesforce Files (Generally Available)

For improved security in your org, files are scanned for malware in Salesforce Files. This feature, now generally available, includes some changes since the beta release. The setting “Scan files for viruses or malware” now appears in the new Malware Scanning page in Setup. On this page, a new setting enables notifications about malicious files for users with the Manage Malicious Files permission. Also, you can now assign the Manage Malicious Files permission to any standard user. Previously, only admins had this permission.

Where: This change applies to Salesforce Files accessed through Lightning Experience and Salesforce Classic in Essentials, Group, Enterprise, Professional, Performance, Unlimited, Contact Manager, and Developer editions hosted on Hyperforce.

Who: Users who want to access the Malicious Files list, download malicious files, and get notified when a malicious file is detected require the Manage Malicious Files user permission. Users who want to only download malicious files require the Download Malicious Files user permission.

How: From Setup, in the Quick Find box, enter Files, and then select Salesforce Files | Malware Scanning. The setting Scan files for viruses or malware is turned on by default. If a new file isn’t scanned during the initial upload, it’s scanned asynchronously and, if it contains malware, added to the Malicious Files list. To turn on notifications for users with the Manage Malicious Files permission, select Notify users when a malicious file is detected.

Note
Note Malware scanning in Salesforce Files flags only files that have a high probability of being malicious. If you require more stringent scanning, consider using one of Salesforce’s malware scanning partners.