Does the Palo Alto Networks Firewall Scan RAR or 7zip Files for viruses?
Answer:
RAR and 7zip archive files are not decoded by the firewall. All processing of these files occurs in the WildFire public cloud.
Only ZIP and GZIP are currently supported. The reason is related to how compression works for RAR, which would make the firewall need to proxy the entire file to scan it. This would create a significant impact to the performance.
Which is why WildFire public cloud is used to examine both RAR and 7zip files.
Note: WildFire WF-500 units currently do not support scanning RAR or 7zip files.
For more information on WildFire, please see the WildFire Admin Guide here: