topic Re: Empty WildFire log after upgrade in General Topics

Empty WildFire log after upgrade

_slv_ — Sat, 23 Mar 2013 13:17:16 GMT

Few days ago I upgradded my devices from 4.1.10 to 5.0.3

I found new log caled WildFire, but it's empty.

Yestarday I got email from WildFire with report that someone from my network downloaded malware. So Im sure that this incident should be in log - but it isn't - why?

Do I need to configure something?

Regards

Slawek

Re: Empty WildFire log after upgrade

HITSSEC — Sat, 23 Mar 2013 15:29:37 GMT

Hi Slawek,

If you do not have a valid Wildfire subscription then the logs will not be populated but you will still get the email alerts as you were getting when you were on 4.1.10. Hope this helps.

Phil

Re: Empty WildFire log after upgrade

emr_1 — Sun, 24 Mar 2013 09:51:28 GMT

As Phil says, you need wildfire subscription on your device.

Then you can check connection between your device and wildfire portal as follow.

admin@PA-200> test wildfire registration

This test may take a few minutes to finish. Do you want to continue? (y or n)

Test wildfire

wildfire registration: successful

download server list: successful

select the best server: jp-s1.wildfire.paloaltonetworks.com

admin@PA-200>

The following commands are also helpful.

> show wildfire status

To record benign logs, you need to configure following command.

# set deviceconfig setting wildfire report-benign-file yes

# commit

Regards,

Re: Empty WildFire log after upgrade

_slv_ — Mon, 25 Mar 2013 08:15:26 GMT

Thank you

You are correct - I havent WF licence.