Antivirus vs WF

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Antivirus vs WF

L2 Linker

 

Thanks.

1 accepted solution

Accepted Solutions

Cyber Elite
Cyber Elite

Antivirus has signatures for known malicious files.

Sandbox mean actually executing file and checking what it does. What kind of disk or registry reads/writes, what network connections it performs etc. So monitoring the behavior and deciding based on it if file is benign or malicious.

 

If company did not have wildfire then they either did not have budget for additional subscription or their fw admin was not familiar with Palo Alto's capabilities.

Basic WildFire is free. It allows executable file scanning.

WildFire subscription adds also other file types:

https://docs.paloaltonetworks.com/wildfire/9-1/wildfire-admin/wildfire-overview/wildfire-file-type-s...

Enterprise Architect, Security @ Cloud Carib Ltd
Palo Alto Networks certified from 2011

View solution in original post

3 REPLIES 3

Cyber Elite
Cyber Elite

WildFire will run files in sandbox, analyze and monitor their activity to identify zero-day malware that antivirus signatures don't catch.

Enterprise Architect, Security @ Cloud Carib Ltd
Palo Alto Networks certified from 2011

Cyber Elite
Cyber Elite

Antivirus has signatures for known malicious files.

Sandbox mean actually executing file and checking what it does. What kind of disk or registry reads/writes, what network connections it performs etc. So monitoring the behavior and deciding based on it if file is benign or malicious.

 

If company did not have wildfire then they either did not have budget for additional subscription or their fw admin was not familiar with Palo Alto's capabilities.

Basic WildFire is free. It allows executable file scanning.

WildFire subscription adds also other file types:

https://docs.paloaltonetworks.com/wildfire/9-1/wildfire-admin/wildfire-overview/wildfire-file-type-s...

Enterprise Architect, Security @ Cloud Carib Ltd
Palo Alto Networks certified from 2011

Thanks.

  • 1 accepted solution
  • 2368 Views
  • 3 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!