Prevent “Red Accounts” by Protecting Customers Against Viruses
- Salesforce customers are learning that Salesforce doesn’t scan files for viruses, malware, ransomware, and other threats.
- They are really unhappy that they have not been notified by their Salesforce account reps.
- Proactively communicating with customers about the issue, educating them and discussing options to help them goes a long way with credibility and professional courtesy. It also helps to avoid future issues of the customer finding out on their own?
You Should Know
- Salesforce does not inherently scan content for viruses, ransomware, malicious URL endpoints. It relies on a third-party solution such as EZProtect to do the job.
- Salesforce Shield focuses on encryption, not virus scanning, and is therefore limited to the level of protection it provides.
- Best practices for Salesforce security include both an anti-virus solution + encryption = EZProtect + Salesforce Shield.
- All Salesforce customers are vulnerable to malicious content entering Salesforce environments – every organization, in every market, around the globe.
- Customers using communities, sites, portals, email-to-case are especially vulnerable.
- There are only two solutions on the market today which may provide protection against malicious content entering Salesforce environments – EZProtect and F-Secure. Scanning content in Salesforce is very complicated due to the architectural limitations of the application.
- EZProtect was designed for large enterprises by Salesforce experts (Certified Technical Architect), which is the only application to provide real-time scanning, including an API enabling scanning of any cloud-based application, and volume-based pricing vs. by user (saves the customer money).
- F-Secure is a good product but was not designed by Salesforce experts and limited for large enterprises. F-Secure is a virus scanning company that basically tweaked its “out of the box” solution for general virus scanning and has tried to apply it to Salesforce. Its premise is based on an old-school approach to virus scanning (user-based/desktop installation) and does not address volume-based scanning, especially for organizations using communities and/or public portals. It’s much better suited for small organizations who are not dealing with large volume or cloud-based infrastructure.
- Scanning Options – There are two versions of EZProtect available. Basic which provides near-real-time scanning – scans content after it’s entered Salesforce. There is a delay of content accessibility of a few seconds up to a minute before the content is scanned and cleared or quarantined.
- The Advanced version provides real-time scanning of all content BEFORE it enters Salesforce and includes an API to connect to other cloud-based applications (using Mulesoft for example) to also scan their environments.
- It also includes whitelisting, blocking file types (.jpegs for example), blocking of PDFs with active scripts, custom file discovery queries and asynchronous scans.
- Pricing – EZProtect pricing is based on the scan volume vs. the number of Salesforce users. Why? Because we want our customers to only pay for what they use vs. the number of Salesforce licenses within an organization that may not use the feature. And, if the customer is using communities and portals, the license model does not apply as files are coming from outside of the organization. One of our federal clients use sites and collects 65k+ files a month from the general public nationally. Pricing starts at 5k scans per month and is based on small, medium, large and extra-large buckets (upwards of 65k scans per month).
- Support – We offer both basic and premier support (24/7) options for our global customers. Pricing depends on the subscription level. Support is included with some levels of advanced versions of EZProtect.
Adaptus is a software-as-a-service (SaaS) provider focused on emerging technologies specializing in customizable cybersecurity for business management applications such as Salesforce, Box.com, Sharefile, Office 365 OneDrive, Mulesoft, Boomi, etc.
Founded in 2012 on the premise of collaborating with customers to solve real problems, Adaptus products are used by large, Fortune-500 companies with thousands of users.
Led by a Salesforce Certified Technical Architect (CTA), Adaptus provides corporate peace of mind through innovative simple and innovative emerging intelligent technologies to safeguard their secrets.
Based in Austin, TX, Adaptus works with technology partners such as Deloitte, Accenture, and others to serve organizations around the globe including North America, Europe, and soon, APAC. For more information about our products or services contact us today.