Wildfire uploaded file disposition

[dford]

I've heard customers express concerns about what happens to a file once it has been uploaded to Wildfire.  If the file were the product of a spearfishing attack, it could potentially contain information about the victim that may be sensitive in nature.

How are uploaded files protected from accidental disclosure?

Does Wildfire dispose of the file once it has been evaluated?

How can I reassure a customer that the file they uploaded can't be accidently disclosed?

Thanks,

Dave Ford

dave@proteus.net

[mikand]

In my opinion if the file might contain sensitive data then it shouldnt be sent to wildfire at all (as wildfire currently works since Amazon EC2 etc is involved in the process).

I have spoken to my SE regarding the need of a privat cloud (cloud runned in your own datacenter so the files sent to wildfire engine never leaves your datacenter) and hopefully this will happen some day...

You can however be somewhat selective on which files to upload to wildfire.

For example only files arriving from internet zone or downloaded by a specific user/usergroup and such (or from a specific url and so on).

[tettema · Accepted solution]

Please see our recently published tech note on this topic at https://live.paloaltonetworks.com/docs/DOC-2880