even if it means upgrading licensing to pay for additional features, being able to enforce AntiVirus file upload scanning for specific APIs as a quick 2 or 3 step config directly on the Load Balancer just like enabling rate limiting or Bot Protection, would make integrating that AV solution easier that the tenant having to have their own AV solution running and spending time getting firewalls setup to allow that connectivity.