CanIt will work with third party antivirus soft which meets the following requirements.
- The AV software must run as a daemon. A command-line-only scanner will be too slow, as you've discovered.
- The communication protocol between the client and the server must be open and documented. This is absolutely critical; we cannot integrate an AV scanner into CanIt unless the provide the wire protocol to communicate with the daemon or an open-source library for communicating with it.
One of our customers uses fpscand from F-Prot. This software is already integrated with CanIt and has an open and documented protocol.
We do not recommend Sophos because Sophos refuses to document the protocol used by the scanning daemon.