The virtual machine interface (vm-interface) provides external
network connectivity from the sandbox virtual machines in the WildFire
appliance to enable observation of malicious behaviors in which
the file being analyzed seeks network access. The following sections
describe the VM interface and the steps required for configuring it.
You can optionally enable the Tor feature with the VM interface,
which will mask any malicious traffic sent from the WildFire appliance
through the VM interface, so the malware sites that the traffic
may be sent to cannot detect your public‑facing IP address.
This section also describes the steps required to connect the
VM interface to a dedicated port on a Palo Alto Networks firewall
to enable Internet connectivity.