Free wildfire

Reply
Highlighted
L4 Transporter

Free wildfire

I thought there was a limited version of wildfire that you could use for PE files. But it isn't working, I do a test registration and it fails. Is there something that is missing in the instruction that I have

 

https://live.paloaltonetworks.com/t5/Articles/Wildfire-Configuration-Testing-and-Monitoring/ta-p/577...

Highlighted
Cyber Elite

Make sure you have a valid and up to date Threat Prevention license and definitions.

Tags (1)
Highlighted
L4 Transporter

I do. I have a subcription for three years

Highlighted
Cyber Elite

If its failing, then I would recommend you contact support. Such as in my case, it was something they had to do but was not documented on the support portal and I cant recall the solution.

Highlighted
L4 Transporter

This is not resolved why is it marked as resolved

Highlighted
L5 Sessionator

Hi Jprovine,

 

answer is simple: you won't be able to configure Wildfire service without having a license for it. You can stop trying, it won't work, and TAC can't help with that. Wildfire service is sandbox that proactively runs your code in the virtual machine before it is delivered to your end-user, that is a licensed service and you will not be able to fully use it until you purchase a license.

 

Here is the Wildfire admin guide: https://live.paloaltonetworks.com/t5/Articles/WildFire-Administrator-s-Guide-6-1-English/ta-p/54977

on page 4, there is a flowchart, I recommend opening and reading it. You were told in the other thread that you will benefit from Wildfire even if you don't have the license, but it did not catch your eye how; thing is - PAN analyses Wildfire reports from all customers that participate in cloud or that allow forwarding from their appliances, any and all malware cought in the previous period will be included into the next AV update. Those are updated frequently, and will be delivered to your device on the daily basis, meaning that you will not be more than 24 hours late to benefit from Wildfire service indirectly.

At the bottom right end of the said flowchart, you see what happens for users who are licensed for the Wildfire - their findings end up in signatures shared with everyone else. You are benefiting in the first step, but without license you are not participating in the rest of the flowchart.

 

So you are already having all the free benefits you can have provided that you are updating AV on a regular basis and of course if you are using AV profiles in the security policies.


Hope this clarifies your question.

 

Regards

 

Luciano

Highlighted
L4 Transporter

Wow the tone of this response is unbelievable.

Highlighted
L5 Sessionator

Hi,

 

If you want to test all Wildfire feature, you should have a test license (1 month) on your paloalto portal (where you registered your device).

 

hope help

 

V.

Highlighted
L4 Transporter

TAC just showed me how to configure the limited version of wildfire

Highlighted
L7 Applicator

Is the procedure documented somewhere for the limited version?

Steve Puluka BSEET - IP Architect - DQE Communications (Metro Ethernet/ISP)
ACE PanOS 6; ACE PanOS 7; ASE 3.0; PSE 7.0 Foundations & Associate in Platform; Cyber Security; Data Center
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!