Antivirus vs WF

tinhnho — Tue, 02 May 2023 12:57:49 GMT

Thanks.

Re: Why do we need wildfire?

Raido_Rattameister — Mon, 01 May 2023 16:50:12 GMT

WildFire will run files in sandbox, analyze and monitor their activity to identify zero-day malware that antivirus signatures don't catch.

Re: Why do we need wildfire?

Raido_Rattameister — Mon, 01 May 2023 17:05:58 GMT

Antivirus has signatures for known malicious files.

Sandbox mean actually executing file and checking what it does. What kind of disk or registry reads/writes, what network connections it performs etc. So monitoring the behavior and deciding based on it if file is benign or malicious.

If company did not have wildfire then they either did not have budget for additional subscription or their fw admin was not familiar with Palo Alto's capabilities.

Basic WildFire is free. It allows executable file scanning.

WildFire subscription adds also other file types:

https://docs.paloaltonetworks.com/wildfire/9-1/wildfire-admin/wildfire-overview/wildfire-file-type-support

Re: Why do we need wildfire?

tinhnho — Mon, 01 May 2023 18:07:22 GMT

Thanks.

topic Re: Why do we need wildfire? in Next-Generation Firewall Discussions

Antivirus vs WF

Re: Why do we need wildfire?

Re: Why do we need wildfire?

Re: Why do we need wildfire?