Unique samples sent to the Advanced WildFire
cloud for analysis can be deleted at the discretion of the user.
This allows users who are subject to data protection policies, including
those who must comply with GDPR, to permanently dispose of sample
data based on their organization’s retention policies. Sample data
includes session / upload data and the sample file itself.
Create a text file with a list of SHA256 or MD5
hashes of the samples to be deleted. Each hash must be on an individual line
in the file and can include up to 100 samples.
Only files that are unique to your environment can
be deleted. If files are found to be available in other public or
private feeds, only the session and upload data for a given account
is removed.
Log in to the WildFire portal using your Palo Alto Networks
support credentials or your WildFire account.
Select
Settings
on the menu bar.
Click
Choose File
and select the
hash list text file that you created in step 1 and then
Remove Samples
.
You will receive a confirmation upon a successful file upload.
After the samples are removed from the WildFire cloud,
you will receive a confirmation email with the details of the request.
This includes a list of the samples that were requested to be deleted,
and the removal status of each sample. This process can take up
to 7 days.
Samples that do not exist or are not unique to your
environment will return statuses of