I sometimes have clients who come in with USB drives loaded with files we need to handle. Currently, we scan these drives with antivirus software right on the endpoint, but it feels like that might not be the safest approach. Even though we've made progress compared to last year when we had no scanning at all, any new solution I consider needs to be easy to use since otherwise, staff won't bother adopting it.
I'm envisioning a simple quarantine setup, maybe with a budget Linux machine that can mount USB drives as read-only, use ClamAV to scan them, and copy clean files to another drive that staff can access. Before I dive into building something entirely from scratch, I'm wondering if there's a pre-made solution out there that fits these needs. I came across CIRCLean, but it looks like it hasn't been maintained. Ideally, I want something that maintains the original file formats, can run on a Raspberry Pi or an old NUC, and isn't too demanding to manage. How do other people handle this situation?
2 Answers
Using a Raspberry Pi could work well! You might attach it to the back of a monitor with a USB port labeled to make it obvious. Setting up a big desktop icon that runs a bash script for scanning the USB and only copies over approved file types to a file share could streamline the process. But, while it sounds manual, there are times when email just doesn't cut it for larger files like videos, so this setup could be handy.
I actually built something similar on a Debian box that sits on the guest network. It scans the USB drive with ClamAV, and then it uploads the contents to a SharePoint library, where they undergo another round of scanning by Microsoft before users can download them. It's a straightforward setup that keeps things secure.
Exactly! Email works for smaller stuff, but large video files often need a different solution.