There are 2 settings. There is a file blocking profile which can be setup to alert, continue, block, or forward to WildFire for sandboxing based on file type. There is another setting for WildFire signatures under the AV profile. This setting is used to decide what you would like to do with WildFire malware signatures. If you set WildFire signatures to block, it will block on malicious files based on the WildFire signatures. WildFire signatures are updated every 30 minutes based on malware detected from all devices sending files to WildFire.
... View more