Compressed and Encoded File Analysis

Where Can I Use This?
What Do I Need?
  • PAN-OS
  • Prisma Access
  • Advanced WildFire License
    For Prisma Access, this is usually included with your Prisma Access license.
By default, the firewall decodes files that have been encoded or compressed up to four times, including files that have been compressed using the ZIP format. The firewall then inspects and enforces policy on the decoded file; if the file is unknown, the firewall forwards the decoded file for WildFire analysis. While the firewall cannot forward complete ZIP archive files for Advanced WildFire analysis, you can submit files directly to the Advanced WildFire public cloud using the WildFire portal or the WildFire API.
RAR and 7-Zip archive files are not decoded by the firewall. All processing of these files occurs in the Advanced WildFire public cloud.

Recommended For You