Issue Sync and attachement virus scanner

[Daniel Schillig]

Hello community,

(Data Center on Windows, installed as a service)

I am looking for a solution to the following problem:

My customer is running Jira Data Center on a Windows platform. We are having performance issues because as soon as the virus scanner is activated with Jira, the CPU is under full load and the system can no longer be used. It was therefore decided not to use the virus scanner with Jira.

But now an external provider has to be connected to sync the issues. This should be done with the app ‘Backbone Work Sync’.

Since the virus scanner cannot be used, we are looking for a solution to scan any attachments to the issues that are synced by the external provider. 

Does anyone have an idea how we can solve this problem?

Thank you!

[Albert Manuel · Accepted solution]

Hi @Daniel Schillig 

In the past i had the same issue and i ended up stopping any kind of scanning when a new attachment was added to jira, but i did a full scan of /attachments folder location when everyone was sleeping 😴 like at 4am in the morning

[Daniel Schillig]

Hi @Albert Manuel 

thank you for your reply!

Scanning the folder was also my idea, but the customer does not acceppt this solution.

Daniel

[Albert Manuel]

Hi Daniel,

I guess you need to take the long path here....

One approach I’ve seen work is to offload virus scanning entirely from Jira by using an external script or service that monitors the attachments folder asynchronously.

Instead of real-time scanning (which overloads the CPU), files are scanned shortly after they're added — say every 30 minutes or when a change is detected — using a lightweight antivirus CLI (like ClamAV or Windows Defender CLI).

If your customer insists on scanning before Jira uses the file, you could introduce a “quarantine” staging folder where files are placed and scanned before being moved to the actual Jira attachment directory.

Maybe this helps you
-Albert

[Daniel Schillig]

Hi again!

You're right, it's going to be a longer path.

The customer operates in the public sector and has very high security requirements. We will test the path with the quarantine folder and see if it is practical.

Thanks again for your help!
Daniel

[Matthias Gaiser _K15t_]

Hey @Daniel Schillig

I'm part of the team behind Backbone Work Sync and happy to think about solutions to your use case. If I understand it correctly, you're searching for a way to scan all attachments which are synchronized from the external provider.

Did you already make progress with @Albert Manuel's solution approach?

If not, I'd think about a possible solution using our behind the firewall setup which is designed to exchange .bac files between two Jira instances. These .bac files are basically zip files. If you use this setup, you could virus scan all these zip files before Backbone imports them.
Let me know if you'd like to get more information about this approach, also happy to discuss it in more detail in a support request if you prefer.

Cheers,
Matthias.