Block grayware files?

Reply
L2 Linker

Block grayware files?

We have recently had a few grayware alerts come through and i was wondering is there anyway files marked as grayware in WIldfile could be blocked the same as they are for malicious files? 

 

Thanks

L7 Applicator

Re: Block grayware files?

Hello,

I dont know of a way to do it on the PAN itself. However looks like if you have traps. it can.

 

https://www.paloaltonetworks.com/documentation/34/endpoint/newfeaturesguide/malware-protection-featu...

 

You can always submit a feature request to your SE.

 

Regards,

L2 Linker

Re: Block grayware files?

Thanks, i did do a little research before posting on here and all i could see was Traps related stuff but unfortunatly we dont have Traps, so i might have to request it a feature

 

 

L6 Presenter

Re: Block grayware files?

There is no Antivirus signature generation for grayware files.

L2 Linker

Re: Block grayware files?

yup i read that as well haha

 

I was just hoping that the firewall can alert you its grayware it could then give you the option to block it but it seems it cant. Im also looking at our endpoint protection as well as this should step in to help it out

Highlighted
L6 Presenter

Re: Block grayware files?

Yes, Traps can be configured to block files marked as grayware by WildFire through Hash Control.

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!