SAP security note 797108, “Virus scan interface (NW-VSI): Changes and releases”, is a note. Below are the reason and prerequisites, SAP recommended solution, references and affected software components.
Description
Solution
If you do not yet have an external scan product, you will find more information on the SAP Service Marketplace under Security Partners, Partner for Virus Scan Interface (NW-VSI). For more information, see Note 786179.
The interface ‘Virus-Scan-Interface’ is known as NW-VSI externally and as VSI internally. Currently, VSI Version 1.7 is supported.
SAP supports VSI in the following components (executables):
- Virus Scan Server (vscan_rfc): see Note 782963
- AS ABAP (disp+work)
- AS JAVA (jlaunch or jstart)
If problems occur with VSI in one of these components, send an OSS message to BC-SEC-VIR with the version details from the component. This can be determined using the option -v, for example: jlaunch -v and vscan_rfc -v.
These components are available from Kernel 6.40 and are detailed in the following notes:
- Note 1058031 for 620 with 640 Kernel
- Note 1058032 for 640 Kernel
- Note 1058033 for 700 or 710 Kernel
- Note 1058033 for 710 Kernel
Use Note 817623 to integrate NW-VSI into your SAP environments using external AV products.
Reason and prerequisites
Prerequisites:
- You are using an SAP R/3 Enterprise system or an SAP NetWeaver’04 (or higher) system.
- You already have an external, SAP certified anti-virus security solution (see Note 786179).
- You are using the latest version of VSI.
References
This note refers to
- 996008 – Virus check for data archiving
- 817623 – Frequent questions about VSI in SAP applications
- 807989 – Problem analysis: Virus scan during file upload
- 803637 – Virus check added to gui_upload
- 786179 – Data security products: Use in the antivirus area
- 782963 – SAP Note about usage of Virus Scan Server for NW-VSI
- 639486 – Anti-virus protection within SAP applications (BC-SEC-VIR)
Referenced by
- 2569738 – SFP Adobe Form activation error
- 786179 – Data security products: Use in the antivirus area
- 817623 – Frequent questions about VSI in SAP applications
- 639486 – Anti-virus protection within SAP applications (BC-SEC-VIR)
- 1873145 – Security update for stock pool upload
- 1671303 – Virus scans in Web service messages (payload and attachments)
- 803637 – Virus check added to gui_upload
- 782963 – SAP Note about usage of Virus Scan Server for NW-VSI
- 1522258 – Virus Scan Interface 720: Corrections
- 1056884 – Error when creating virus scan profiles
- 1058033 – Virus Scan Interface 700: Corrections
- 1155653 – Virus scan interface 710: Corrections
- 1058032 – Virus Scan Interface 640: Corrections
- 1058031 – Virus Scan Interface 620: Corrections
- 807989 – Problem analysis: Virus scan during file upload
- 996008 – Virus check for data archiving
Affected components
- SAP_BASIS (620 to 640+)
- SAP_BASIS (700 to 700)
Full note on SAP: SAP Support Launchpad note 797108
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].