08-28-2015 01:15 PM
I thought there was a limited version of wildfire that you could use for PE files. But it isn't working, I do a test registration and it fails. Is there something that is missing in the instruction that I have
09-21-2015 01:15 PM
Good point reaper!
09-21-2015 02:13 PM
I will check this out reaper - I agree good point but it also needs to be included on the limited version of wildfire instructions
09-21-2015 02:14 PM
Mine is already set to use management interface for all
09-21-2015 03:36 PM
i've updated both the wildfire config and testing and the Discussion of the Week with some additional pointers
if all your service routes are currently still the default (mgmt) there should already be a rule that allows your dynamic updates and software updates (if not you may consider creating a policy to support all these in one go, or opt for the service routes as mentioned above)
a good cli command to figure out which rule would allow your management outbound traffic is :
> test security-policy-match source <management-IP> destination 22.214.171.124 protocol 7 destination-port 443
the destination ip is from our updates server
09-22-2015 10:53 AM
In 6.1 and below, wildfire is tied to a "File Blocking" profile. Create a profile that detects any file type for any application and set the action to "forward". This should start sending MD5 hashes to Wildfire. 7.0 has changed things. I am looking for the config guide as I write this.
09-23-2015 05:47 AM
This was my result of that command and that doesn't seem right to me
provine@sis-pamgt(active)> test security-policy-match source 126.96.36.199 destination 188.8.131.52 protocol 7 destination-port 443
to [ BUILDINGTECH LEGACYQUICKCARD ];
09-23-2015 02:42 PM
09-29-2015 02:16 PM
I did as you said and test security-policy-match source 184.108.40.206 destination 220.127.116.11 protocol 7 destination-port 443 outside and still got the same result as in the previous reply
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!