What does WithSecure Cloud Protection application do?
WithSecure Cloud Protection for Salesforce is a native application and runs in your Salesforce environment. The app prevents malicious and disallowed content from getting into your Salesforce environment via files, web links and email messages.
Where can I find the app, and how long does the installation take?
The Cloud Protection for Salesforce app can be found and installed from Salesforce AppExchange: https://appexchange.salesforce.com/appxListingDetail?listingId=a0N3A00000EFntJUAT
Installation takes a few minutes and doesn’t require any changes in your network or devices.
Is there a trial version available for evaluation?
You can install WithSecure Cloud Protection app from Salesforce AppExchange with 15-day free trial license to your production or sandbox Salesforce environment. No license or subscription keys are needed for installation, and the app is fully functional during the trial.
Which Salesforce editions are supported?
WithSecure Cloud Protection supports the following Salesforce editions:
- Enterprise
- Performance
- Unlimited
- Developer
Salesforce Essentials and Professional editions are not supported due to the lack of platform features and capabilities that WithSecure solution relies on.
Does WithSecure store my data?
WithSecure Cloud Protection for Salesforce doesn’t store your data. All data including WithSecure analytics is stored in your Salesforce environments. WithSecure app only sends copies of files for threat analysis and those are deleted after analysis is complete.
Where is data processed when it is sent for threat analysis?
WithSecure Cloud Protection for Salesforce leverages WithSecure Security Cloud, which is hosted in Amazon AWS data centers located in North America (US) and Europe (Ireland). When scanning files and URLs, WithSecure Cloud Protection selects WithSecure Security Cloud located in the same or nearest region as the customer’s Salesforce org instance. That is, for customers using Salesforce orgs in Europe and APAC (i.e. running in Salesforce data centers EU1-26, UM1-UM5 and AP0-AP15), data will be processed in WithSecure Security Cloud deployed in EU region. For Salesforce orgs running in NA8-NA99 data centers, data will be processed in US region.
How long is the data stored at WithSecure after threat analysis?
Data sent for content reputation and threat analysis are not stored at WithSecure. More specifically, when a file is sent to WithSecure Security Cloud, it is encrypted with unique, one-time generated encryption key. Once threat analysis is complete, the file and encryption key are deleted. For details about data collection and retention, please check the privacy policy at: https://www.withsecure.com/en/about-us/legal/corporate-privacy
What are the average times of scanning files in ranges 1-10 MB / 10-50 MB / 50 MB-100 MB?
We don’t have any specific numbers to share. However, consider that in the default configuration the max scan timeout is set to 30 secs and we haven’t heard of any existing customers who would change it to more than 60 secs. With cloud-to-cloud integration, data transfer and scanning doesn’t take too long even for large files.
What types of malware WithSecure solution protects from?
WithSecure Cloud Protection for Salesforce relies on the same award-winning technologies, which WithSecure develops and uses in the end-point protection solutions. It is capable to detect all modern and advanced malware including traditional viruses, Trojans, spyware, ransomware, malicious web sites, phishing and other security threats.
What file types are supported, are there file types that can’t be handled?
All potentially dangerous file types and formats are currently supported and WithSecure is constantly monitoring security landscape to respond to new threats. As mentioned above, WithSecure Cloud Protection for Salesforce uses the same technologies as WithSecure’s end-point protection products and hence can detect harmful content in files uploaded from different devices and operating systems including Windows, Mac, Linux and mobile platforms.
Can the product scan archives? If it can, which formats?
Yes, WithSecure Cloud Protection for Salesforce can scan files inside archives. The solution supports many popular archive formats, including but not limited to: ZIP, 7Z, ARJ, RAR, JAR, LZH, CAB, TGZ, BZ2.
Does the product scan files uploaded via Salesforce REST or SOAP APIs?
Yes, it does scan files uploaded via Salesforce APIs, provided files are saved as standard Salesforce objects (such as ContentVersion or Attachments).
How often are antivirus and other threat databases updated?
WithSecure solution employs multiple threat analysis technologies including real-time content reputation service and multiple antimalware engines. The content reputation service uses the threat intelligence database which is updated million times per day. Antimalware engines get updates several times per day.
Is the product updated automatically?
Yes, WithSecure Cloud Protection app receives regular automatic updates.
Which industry-recognized standards does the product comply to?
WithSecure has achieved ISO 27001 certification and undergoes regular audits by external auditors to ensure we’re adhering to industry best practices. The solution has also completed an ISAE 3000 (SOC 2) Type II. The product is also compliant to HIPAA standards.
Is the solution GDPR compliant?
Yes, the solution is compliant to GDPR regulations.