topic Re: Wildfire uploaded file disposition in General Topics

Wildfire uploaded file disposition

dford — Thu, 26 Apr 2012 15:39:04 GMT

I've heard customers express concerns about what happens to a file once it has been uploaded to Wildfire. If the file were the product of a spearfishing attack, it could potentially contain information about the victim that may be sensitive in nature.

How are uploaded files protected from accidental disclosure?

Does Wildfire dispose of the file once it has been evaluated?

How can I reassure a customer that the file they uploaded can't be accidently disclosed?

Thanks,

Dave Ford

dave@proteus.net

Re: Wildfire uploaded file disposition

mikand — Thu, 26 Apr 2012 20:00:20 GMT

In my opinion if the file might contain sensitive data then it shouldnt be sent to wildfire at all (as wildfire currently works since Amazon EC2 etc is involved in the process).

I have spoken to my SE regarding the need of a privat cloud (cloud runned in your own datacenter so the files sent to wildfire engine never leaves your datacenter) and hopefully this will happen some day...

You can however be somewhat selective on which files to upload to wildfire.

For example only files arriving from internet zone or downloaded by a specific user/usergroup and such (or from a specific url and so on).

Re: Wildfire uploaded file disposition

tettema — Fri, 27 Apr 2012 20:46:52 GMT

Please see our recently published tech note on this topic at https://live.paloaltonetworks.com/docs/DOC-2880