I thought of creating a technical ‘How to’ guide for configuring the Virus Scan Interface (VSI) and decided to write a weblog on the same topic. VSI in the SAP application server is used to scan the virus for any file upload into the application server using the method GUI_UPLOAD of class CL_GUI_FRONTEND_SERVICES. SAP has already given 2 standard virus scan profiles for the file upload named /SCET/GUI_UPLOAD & /SIHTTP/HTTP_UPLOAD.
You can use the Virus Scan Adapter (VSA) from any of your anti-virus vendors, to configure the virus adapter in the ABAP application server. To test the VSI functionality, I downloaded the trail version of Avira Antivir Virus Scan Adapter for SAP from the link http://www.avira.com/en/downloads/avira_antivir_vsa_for_sap.html and applied for the 30 days test license.
Now you can test your virus scan server by using the ‘VSCANTEST’ transaction. This transaction will download a sample EICAR Anti-virus file from the web page ( http://www.eicar.org/anti_virus_test_file.htm ) and try to upload into your application server using the GUI_UPLOAD. Before testing the virus scan interface, switch off your standard virus scanner running in your system.
Note: The “EICAR anti-virus test file” (located under http://www.eicar.org/anti_virus_test_file.htm) is a byte sequence published by EICAR (www.eicar.org) which is recognized by a large number of anti-virus products although it does not contain an actual harmful virus function. It is used exclusively for testing anti-virus products. Please refer the OSS note: 666568 before carrying out the AV testing.