i used PA3020 and software version 6.0.0, wildfire version is 26818-33137
i configured wildfire action to block in antivirus profile and apply to security policy already.
but, when i test to download a malicious files. the action is alert and i can download this file. why?
i don't know, what is wrong in my configure and i want to know, how to configure wildfire to block a malicious file.
Wildfire report shows that the first time the malware was reported at 02-24 14:08 and the log shows alert for type wildfire at 22:59 with wildfire-upload-skip since the file has been already sent to wildfire cloud
If the firewall is equipped with a WildFire subscription then it can receive the new signatures within 30-60 minutes; firewalls with only a Threat Prevention subscription can receive the new signatures in the next antivirus signature update within 24-48 hours. Can you please confirm if you have valid license for wildfire? The wildfire version that you have is 26818-33137 and the latest available is 26836-33168.
i try to test this virus.exe about 4 hours. and i download an update already.
and if you look at this pic. wildfire log is show "virus.exe" is malicious but action is alert, not block.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!
The Live Community thanks you for your participation!