Virus Scanning: Allow Customers to Enable Virus Scan

Prior to 2017, virus scan notifications (when a potentially malicious file was detected) could optionally be enabled (via Internal Admin -> Enterprise Features Customization) which would do 2 things:
1. Generate an email notification to the primary admin
2. Generate an email notification to the file owner

In 2017, Box made a change to also add a notification for the FILEMARKEDMALICIOUS event to the Event Stream. https://docs.box.com/docs/api-changelog#section-2016-05-18-new-event-type-for-enterprise-events

However, in order for this event to populate in the event stream, the 'Virus Scan Notifications' must be enabled via IA, which also generates those 2 other email types above.

REQUEST: Separate 'virus scan notifications' into 2 options:

Setting 1: Enable email notifications to the primary admin and file owner
Setting 2: Enable the FILEMARKEDMALICIOUS event to populate in the Event Stream

RATIONALE: We want this notification to appear in the event stream to import by their DLP/CASB tools (AvePoint, Skyhigh, etc.), but they not NOT want email notifications automatically generated and going to the end users.

2 votes