Wild Fire internet access physical setup

[ABE-Security]

Physical Appliance require a direct internet access or dirty link ? 

[OtakarKlier]

Hello,

You should follow best practices and have the devices management interfaces protected. As for the 'Special' interfaces for the sandbox traffic, that should be unfiltered. This can be done from behind a Palo Alto, such as virtual wire, for outbound only traffic, etc. This way the appliance can reach out to bad URL's and get additional information on malware and other attribution, etc.

Regards,