File search by hash sum

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements

File search by hash sum

L3 Networker

Hi,

Can the PaloAlto firewall search for files using hash sum (chechsum)?

1 accepted solution

Accepted Solutions

Hi,

No, you can't. Neither the Sha256 checksum  used for wildfire nor other checksum are available as usable criteriun.

Hope help

V.

View solution in original post

3 REPLIES 3

L5 Sessionator

Hi Ignas,

The PANFW does look for the hash of the files when using wildfire for file blocking functionality.

The below docs explain the same:

https://live.paloaltonetworks.com/docs/DOC-3300

https://live.paloaltonetworks.com/docs/DOC-5266

https://live.paloaltonetworks.com/message/13942#13942

Hi kprakash,

thanks for your answer. I want to know, if i have exact file packet checksum, can i find all packets in my network which match that checksum? As i understand, PaloAlto don't have such possibility.

Hi,

No, you can't. Neither the Sha256 checksum  used for wildfire nor other checksum are available as usable criteriun.

Hope help

V.

  • 1 accepted solution
  • 5626 Views
  • 3 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!