topic Re: Problem wildfire logs after upgrade fw from 6.1 to 7.1 in General Topics

Problem wildfire logs after upgrade fw from 6.1 to 7.1

Gianpiero — Mon, 27 Feb 2017 10:34:54 GMT

Hi all

i have 2 firewalls managed by panorama, everybody with 7.1.5 recently upgraded from 6.1.

I have a wildfire public cloud configured for an smtp rule to check any file contained in every mail.

A wildfire analysis object profile:

After the upgrade i don't see any more in the Monitor-Data filtering- forward/wildfireupload-skip/success.

And i don't see any more the fileblocking object the possibility to create a profile to forward file for analysis.

Where i was wrong?

The wildfire status is ok(i have checked via cli).

Thanks for all

Gianpiero

Re: Problem wildfire logs after upgrade fw from 6.1 to 7.1

reaper — Mon, 27 Feb 2017 12:03:05 GMT

in 7.1 Wildfire is no longer part of the file blocking profile and needs to be added to a security policy separately

Re: Problem wildfire logs after upgrade fw from 6.1 to 7.1

Gianpiero — Mon, 27 Feb 2017 13:21:03 GMT

It is configured yet:

FIle Blocking is no more configured. But in monitor i don't see any other wildfire-upload

Re: Problem wildfire logs after upgrade fw from 6.1 to 7.1

reaper — Mon, 27 Feb 2017 13:30:06 GMT

you'll want to set a fileblocking profile in alert mode so logs are created, wildfire is an action on the system seeing a file: it appends a wildfire action + verdict to the fileblocking log entry

Re: Problem wildfire logs after upgrade fw from 6.1 to 7.1

Gianpiero — Mon, 27 Feb 2017 13:40:27 GMT

Ok the problem is that i don't see wildefire action any more. For exemple the last event before update was:

then no other logs was generated. But i noticed the i'm receving the wildfire submissions.

That is my problem