Enhanced Security Measures in Place:   To ensure a safer experience, we’ve implemented additional, temporary security measures for all users.

Deny a specific file from being uploaded into Wildfire?

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements

Deny a specific file from being uploaded into Wildfire?

L0 Member

Is there a way to deny a specific file from being uploaded into the Wildfire service?

3 REPLIES 3

L5 Sessionator

Hello genep,

If you know the source IP address of the file, you can create a security rule on top of the existing rule with a that IP address configured in it and NOT associate any file blocking profile to it.

Hope that helps!

Thanks and regards,

Kunal Adak

L7 Applicator

You can only restrict by file type inside a Wildfire configuration.

Or by the user/station source overall, as Kadak notes, in the rule.

You can't exclude a particular file name.  Wildfire compares hashes not names so it does not even pay attention to the file name in the process.

Steve Puluka BSEET - IP Architect - DQE Communications (Metro Ethernet/ISP)
ACE PanOS 6; ACE PanOS 7; ASE 3.0; PSE 7.0 Foundations & Associate in Platform; Cyber Security; Data Center

Sorry to kick an old topic.

 

But indeed it would be nice to have an option to make exemption(s) for a certain hash(es).

I think you really want it on hashes in case a file changes.


- If it is broken, fix it. If it ain't broken, make it better.
  • 3258 Views
  • 3 replies
  • 1 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!