I'm working with a customer right now that wants to deploy Lotus Connections externally (i.e. outside of the firewall). I got an interesting question for them and didn't see the answer documented in the InfoCenter. Therefore, I decided to post it here in case I need to reference it later (or in case it's valuable to you).
The question was around viruses in file uploads. Since this will be available in the internet they were concerned about users who may inadvertently (or knowingly) upload a file. Out of the box, Lotus Connections supports antivirus services that work on ICAP (Internet Content Adaptation Protocol) 1.0 such as McAfee Web Security Appliance and Symantec Scan Engine. How to configure the antivirus for Lotus Connections is documented in the InfoCenter.
However, it's not clear what happens when an infected file is uploaded. Is it automatically deleted? Is the admin notified? Is the user notified? etc. Therefore, I asked one of our developers and got the answer. Action on the file actually depends on how the antivirus system itself is configured. If the antivirus system is configured to clean the files, then the files will be cleaned and then saved normally. If the antivirus is configured to delete infected files, then the file is never saved by Lotus Connections. Regardless, the user is notified of an error while uploading their file.
Now you know 