topic Re: WildFire license expiration in General Topics

WildFire license expiration

Suhaimi — Mon, 23 Dec 2013 15:39:11 GMT

Hi,

If the WildFire license expires, what happens to a PE file if a file blocking profile is already set to forward?

Thanks

Re: WildFire license expiration

kadak — Mon, 23 Dec 2013 16:18:57 GMT

Wildfire subscription enables hourly wildfire signature updates, Integrated logging (Monitor Tab-->Wildfire logs) and Wildfire API. Wildfire free edition (no license subscription) will still copy and forward files (PE) matching the file blocking profile policy to the Wildfire cloud and administrators can view reports of these submitted samples through the Wildfire web portal.

Hope that helps!

Thanks and regards,

Kunal Adak

Re: WildFire license expiration

Suhaimi — Tue, 24 Dec 2013 02:04:36 GMT

Hi Kadak,

Thanks for the reply. I read in the PAN OS Guide that mentions "without the WildFire subscription, you must wait 24 to 48 hours for the signatures to roll into the Threat updates". How does the Threat Prevention license work with WildFire in this case?

Thanks

Re: WildFire license expiration

mikand — Tue, 21 Jan 2014 07:29:36 GMT

Depends on what you mean by your question.

With a regular threat-license the threat-db is updated once a day on weekdays (that is no updates on weekends or holidays).

This threat-db also contains the findings through wildfire but are delayed 24-48 hours. Because thats what you basically pay for with the wildfire license - the ability to faster get the findings (once an hours instead of once a day with a delay of 24-48 hours).