WildFire license expiration

[Suhaimi]

Hi,

If the WildFire license expires, what happens to a PE file if a file blocking profile is already set to forward?

Thanks

[kadak]

Hello Suhaimi,

Wildfire subscription enables hourly wildfire signature updates, Integrated logging (Monitor Tab-->Wildfire logs) and Wildfire API. Wildfire free edition (no license subscription) will still copy and forward files (PE) matching the file blocking profile policy to the Wildfire cloud and administrators can view reports of these submitted samples through the Wildfire web portal.

Hope that helps!

Thanks and regards,

Kunal Adak

[Suhaimi]

Hi Kadak,

Thanks for the reply. I read in the PAN OS Guide that mentions "without the WildFire subscription, you must wait 24 to 48 hours for the signatures to roll into the Threat updates". How does the Threat Prevention license work with WildFire in this case?

Thanks

[mikand]

Depends on what you mean by your question.

With a regular threat-license the threat-db is updated once a day on weekdays (that is no updates on weekends or holidays).

This threat-db also contains the findings through wildfire but are delayed 24-48 hours. Because thats what you basically pay for with the wildfire license - the ability to faster get the findings (once an hours instead of once a day with a delay of 24-48 hours).