How to Set the Maximum File Size Limit for WildFire

How to Set the Maximum File Size Limit for WildFire

49403
Created On 09/25/18 17:36 PM - Last Modified 08/04/20 16:27 PM


Symptom


Setting the maximum file size limits for WildFire.uploads

Environment


  • PAN-OS (6.x / 7.x / 8.x)
  • WildFire


Resolution


  • On PAN-OS 6.1, WildFire supports the following file types and sizes:
         File Type        Size RangeDefault Size

    pe

    1-10 MB10 MB
    apk1-50 MB10 MB
    pdf100-1000 KB500 KB
    ms-office200-10000 KB 500 KB
    jar1-10 MB1 MB

     
  •  On PAN-OS 7.1 and above, WildFire supports the following file types and sizes: 
         File Type        Size RangeDefault Size

    pe

    1-10 MB10 MB
    apk1-50 MB10 MB
    pdf100-1000 KB500 KB
    ms-office200-10000 KB 500 KB
    jar1-10 MB1 MB
    flash1-10 MB5 MB
    MacOSX1-50 MB1 MB

     
  •  Content version 741 added support for .7zip and .rar as 'archive' (PAN-OS 7.1 and above):
         File Type        Size RangeDefault Size

    archive

    1-50 MB10 MB

 

  •  Content version 745 added support for 'linux' file type (PAN-OS 8.0 and above)
         File Type        Size RangeDefault Size

    linux

    1-10 MB2 MB

 

Details

Go to Device > Setup > WildFire > General Settings and enter the values for each of the supported file types:

 

PAN-OS 6.1:

6.1.png

 

PAN-OS 7.1:

Screen Shot 2017-11-09 at 6.55.31 PM.png

 

PAN-OS 8.0:

8.0.png
Content version 745 added the 'Linux' file type to PAN-OS 8.0

Note: When the default size limit is changed by a new content release and if the maximum size limit is increased by the change, you will need to perform following steps in order to reflect the change to the internal queue size that the firewall has. (Details below.)

  1. Review and change desired file size limits in the WildFire setting. (Device > Setup > WildFire)
  2. Config commit


Caveat: Before files are uploaded to WildFire cloud, they are stored in an internal queue on the firewall. The capacity size varies depending on the firewall platform and the number of files that the firewall can store is calculated based on the maximum size limit among all the file types except APK. Please take note of this and change the value with care when you increase the size limit.

For example, the capacity of PA-200 platform is 100MB, and when the max size is 10MB, the File limit becomes 100 / 10 = 10.

admin@PA-200> show wildfire disk-usage


Disk usage for wildfire:
Total disk usage:                            0
Total temporary files:                       0
File limit:          10 (Global), 10 (Channel)
 

 If the command shows different value, please follow the steps above (1 & 2) to reflect the change.



Additional Information


The design was changed in PAN-OS 9.0 so this article is not applicable for PAN-OS 9.0 or later.

Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClGoCAK&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Choose Language