Sample Removal Request
Focus
Focus
Advanced WildFire

Sample Removal Request

Table of Contents

Sample Removal Request

Where Can I Use This?
What Do I Need?
  • Prisma Access (Cloud Management)
  • Prisma Access (Panorama Managed)
  • NGFW (Cloud Managed)
  • NGFW (PAN-OS or Panorama Managed)
  • VM-Series
  • CN-Series
  • Advanced WildFire License
    For
    Prisma Access
    , this is usually included with your
    Prisma Access
    license.
Unique samples sent to the Advanced WildFire cloud for analysis can be deleted at the discretion of the user. This allows users who are subject to data protection policies, including those who must comply with GDPR, to permanently dispose of sample data based on their organization’s retention policies. Sample data includes session / upload data and the sample file itself.
  1. Create a text file with a list of SHA256 or MD5 hashes of the samples to be deleted. Each hash must be on an individual line in the file and can include up to 100 samples.
    Only files that are unique to your environment can be deleted. If files are found to be available in other public or private feeds, only the session and upload data for a given account is removed.
  2. Log in to the WildFire portal using your Palo Alto Networks support credentials or your WildFire account.
  3. Select
    Settings
    on the menu bar.
  4. Click
    Choose File
    and select the hash list text file that you created in step 1 and then
    Remove Samples
    . You will receive a confirmation upon a successful file upload.
  5. After the samples are removed from the WildFire cloud, you will receive a confirmation email with the details of the request. This includes a list of the samples that were requested to be deleted, and the removal status of each sample. This process can take up to 7 days.
    Samples that do not exist or are not unique to your environment will return statuses of
    Not found
    and
    Rejected
    , respectively.

Recommended For You