10-30-2015 06:50 AM
I have a question re Wildfire config.
When the setting is set to 'forward' it gets sent PA cloud for analysis, provided it finds something bad , I assume it is put into the WF signature and next time the file is seen it gets blocked ?
What does the block setting do? Does block any file that is suspects to be questionable?
10-30-2015 01:58 PM
Hello,
You are corerect on the wildfire part provided that the PAN downloads the newer deifinitions that contain the new signature.
For the File Blocking profile, that is if you want to block files in a certian direction or both, i.e. allow ftp downloads but prevent uploads. However once the PAN has the signatures, it will block automatically so you dont have to have a seperate policy for that.
10-30-2015 01:58 PM
Hello,
You are corerect on the wildfire part provided that the PAN downloads the newer deifinitions that contain the new signature.
For the File Blocking profile, that is if you want to block files in a certian direction or both, i.e. allow ftp downloads but prevent uploads. However once the PAN has the signatures, it will block automatically so you dont have to have a seperate policy for that.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
