• Admin permission to your Salesforce console
• One Salesforce Production ATP (Advanced Threat Protection) policy with Real-time Scanning enabled
• One or more Salesforce standard users for testing
• A test laptop/desktop with anti-virus software that can exclude the test samples from detection
• One or more Salesforce Apps and Profiles as selected targets as shown below

Pattern-Based Scanning

1. Download an EICAR file from Download Anti Malware Testfile – Eicar.
2. In the Malware Scanning test policy, ensure that "Scan all files" is selected.

   

3. Log in to the Salesforce production environment with a test user credential and ensure that the test user is a standard user rather than an administrator user.
4. Create a test case and just input any content acceptable by the system, like below:

   

   

5. Attach the eicar sample file as an attachment.

   

    

   Do NOT add the file from the Feed section, or the file will be uploaded with versioning enabled. If you do so, CAS won’t be able to quarantine it.
6. In the Logs tab, confirm that the sample is detected by Pattern-Based Scanning and that the Security Risk Name is “Malware: Eicar_test_file”.

   

TrendX (Predictive Machine Learning)

1. In the Malware Scanning test policy, ensure that "Scan all files" is selected.
2. In the Malware Scanning test policy, ensure that “Enable Predictive Machine Learning” is checked.

   

3. Download TrendX.zip and unzip the file with the password “virus”.
4. Attach the two (2) extracted files to a test case.
5. Wait for several minutes and then in the Logs tab of the CAS Web UI, confirm that the sample is detected by Predictive Machine Learning and that the Security Risk Name is “Malware: Ransom.Win32.TRX.XXPE1”.

   

1. In the Web Reputation test policy, ensure that “Enable Web Reputation” is checked.

   

2. In a test case, add a case comment and then input the test URL like below:

   

   

3. In the Logs tab, confirm that the email is detected and that the Security Filter is "Web Reputation".

   

1. Add a Salesforce Production Policy.

   

2. Ensure that “Enable Data Loss Prevention” is selected and that “All Objects” and "All Profiles" are selected as targets, like below:

   

3. Ensure that "Enable Data Loss Prevention" is selected and that "All: Credit Card Number" is set as "Selected Compliance Template(s)".

   

4. In a test case, add a case comment and then input some test credit card numbers. If you don’t have a test credit card number, you may find some from Test Payflow Transactions (paypal.com).

   

5. In the Logs tab, switch the Type to “Data loss Protection” and confirm that there is a record with the credit card numbers under Violating Content. The test credit card numbers in the sample are from Test Payflow Transactions (paypal.com).