WildFire Config

RC-BHF — Fri, 30 Oct 2015 13:50:03 GMT

I have a question re Wildfire config.

When the setting is set to 'forward' it gets sent PA cloud for analysis, provided it finds something bad , I assume it is put into the WF signature and next time the file is seen it gets blocked ?

What does the block setting do? Does block any file that is suspects to be questionable?

Re: WildFire Config

OtakarKlier — Fri, 30 Oct 2015 20:58:07 GMT

Hello,

You are corerect on the wildfire part provided that the PAN downloads the newer deifinitions that contain the new signature.

For the File Blocking profile, that is if you want to block files in a certian direction or both, i.e. allow ftp downloads but prevent uploads. However once the PAN has the signatures, it will block automatically so you dont have to have a seperate policy for that.

topic WildFire Config in General Topics

WildFire Config

Re: WildFire Config