We are in the process of implementing ESS Fiori Apps. Leave Requests is one of the apps and does have an upload option which by default needs the Virus Scanner profile. We can disable it but would like to know what SAP recommends as it could be a high security risk.
We understand that SAP NetWeaver Virus Scan Interface (NW-VSI) is available for both AS ABAP & AS Java. This can be used to include external virus scanners in SAP to increase the security of the system. We are not clear whether we can use the current virus scan installed on the server or not.