topic Re: Wildfire file-size-limit in General Topics

Wildfire file-size-limit

Hithead — Wed, 22 Jan 2014 10:38:55 GMT

Just installed PANOS6 on a PA200 platform.

Did a change at the configuration and tried to commit. While commit I get the message:

Validation Error:
deviceconfig -> setting -> wildfire -> file-size-limit unexpected
here
deviceconfig -> setting -> wildfire -> file-size-limit is
invalid

Tried to change the values at device -> setting -> wildfire -> general settings but not possible. Same error message.

Also via cli not possible:

# set deviceconfig setting wildfire file-size-limit apk 10

Server error : file-size-limit unexpected here

Beta tester: Any idea how to fix?

Re: Wildfire file-size-limit

Hithead — Wed, 22 Jan 2014 14:53:44 GMT

Am I the only one who has the problem???

Re: Wildfire file-size-limit

jvalentine — Wed, 22 Jan 2014 15:39:08 GMT

With PAN-OS 6.0, this area of the configuration changed. In 5.0 in the configuration file the file-size-limit parameter looks like this (under deviceconfig setting wildfire) :

file-size-limit 10;

But in 6.0 this has changed to (for the different Wildfire supported file types):

file-size-limit {

pe 10;

jar 2;

apk 5;

}

My guess is that you just need to delete the old "file-size-limit 10" setting. In the CLI try this:

admin@pa0(active)# delete deviceconfig setting wildfire file-size-limit

Once that's done, you should be able to make changes to the various file types.

Re: Wildfire file-size-limit

Hithead — Wed, 22 Jan 2014 16:02:31 GMT

Thank you for your reply...

tried your command and also tried to set new values. same error.

# delete deviceconfig setting wildfire file-size-limit

# commit

...

Validation Error:

deviceconfig -> setting -> wildfire -> file-size-limit unexpected here

deviceconfig -> setting -> wildfire -> file-size-limit is invalid

[edit]

(tried to set new values afterwards and to commit - same result)

Curiously, at the running config I cannot find anything with "file-size-limit"....

> show config running | match file-size

> show config running | match file-size-limit

Re: Wildfire file-size-limit

jvalentine — Wed, 22 Jan 2014 17:45:47 GMT

I saw this problem during the beta. When I ran into it, here's what I did to fix the problem:

1.) revert to "running configuration" (in the GUI it is Device / Setup / Operations / Revert)

2.) change the WildFire server to something different

From there, it took my file size changes without complaining. I then changed the WildFire server back to the original setting.

If that doesn't help, then I'd recommend opening a case with TAC.

Re: Wildfire file-size-limit

Hithead — Thu, 23 Jan 2014 07:41:20 GMT

doesn't work for me....

Already opened a ticket. Thank you anyway.

Re: Re: Wildfire file-size-limit

Hithead — Fri, 24 Jan 2014 07:52:09 GMT

can you do me a favor? Please export your running config and copy the complete part of the file-size-limit...

in the section <deviceconfig> my running config at PANOS 6 looks like:

      <wildfire>
            <session-info-select>
              <exclude-username>yes</exclude-username>
              <exclude-filename>no</exclude-filename>
            </session-info-select>
      </wildfire>

The section of file-size-limit is missing.

Re: Wildfire file-size-limit

Hithead — Tue, 28 Jan 2014 13:58:46 GMT

problem solved by myself.

first I downgrade to version 5.0.9, then revert the Panorama-Template config at the wildfire tab. After the commit I reinstalled PANOS6. Now everything looks great. Thanks anyway.

Re: Wildfire file-size-limit

james.cambray — Mon, 17 Feb 2014 17:33:40 GMT

Guys I had the same problem and I got it working.

I had to change the size one file at a time.

example... change JAR file from 1MB to 10MB and hit the okay button.

go back and change exe file size from 1MB to 10MB and hit the okay button.

Hope that helps!

-JC

Re: Wildfire file-size-limit

Richard_Bergen — Fri, 17 Feb 2017 21:31:42 GMT

This worked for me, but had to reboot the firewall first. Reverting to running config still produced an error for me.

Re: Wildfire file-size-limit

ARM — Mon, 10 Apr 2017 12:42:33 GMT

On PANOS 8.0.1:

delete deviceconfig setting wildfire file-size-limit MacOSX

That's what seems to have fix the problem. For me started with the upgrade from 7.X to 8.0 and