Block grayware files?

[CRDF18]

We have recently had a few grayware alerts come through and i was wondering is there anyway files marked as grayware in WIldfile could be blocked the same as they are for malicious files? 

Thanks

[OtakarKlier]

Hello,

I dont know of a way to do it on the PAN itself. However looks like if you have traps. it can.

https://www.paloaltonetworks.com/documentation/34/endpoint/newfeaturesguide/malware-protection-featu...

You can always submit a feature request to your SE.

Regards,

[CRDF18]

Thanks, i did do a little research before posting on here and all i could see was Traps related stuff but unfortunatly we dont have Traps, so i might have to request it a feature

[mivaldi · Accepted solution]

There is no Antivirus signature generation for grayware files.

[CRDF18]

yup i read that as well haha

I was just hoping that the firewall can alert you its grayware it could then give you the option to block it but it seems it cant. Im also looking at our endpoint protection as well as this should step in to help it out

[mivaldi]

Yes, Traps can be configured to block files marked as grayware by WildFire through Hash Control.