>
    Strata Copilot
    Enable App Scan Integration with WildFire
    Focus
    Download PDF
    Focus
    1. Home
    2. GlobalProtect
    3. GlobalProtect Administrator's Guide
    4. GlobalProtect Apps
    5. Deploy the GlobalProtect App on Mobile Devices
    6. Manage the GlobalProtect App Using Workspace ONE
    7. Enable App Scan Integration with WildFire
    Download PDF
    GlobalProtect

    Enable App Scan Integration with WildFire

    Table of Contents

    Enable App Scan Integration with WildFire

    Where Can I Use This?What Do I Need?
    • NGFW (managed by Panorama or Strata Cloud Manager)
    • Prisma Access (managed by Panorama or Strata Cloud Manager)
    • GlobalProtect Gateway license or Prisma Access license with the Mobile User subscription
    By enabling App Scan in Workspace ONE, you can leverage WildFire® threat intelligence about apps to detect malware on Android endpoints. When enabled, the Workspace ONE agent sends the list of apps that are installed on the Android endpoint to Workspace ONE. This occurs during enrollment and subsequently on any endpoint check-in. Workspace ONE then periodically queries WildFire for verdicts and can take compliance action on the endpoint based on the verdict.
    1. Before you begin, obtain a WildFire API key. If you do not already have an API key, contact Support.
    2. From Workspace ONE, select Groups & SettingsAll SettingsAppsApp ScanThird Party Integration.
    3. Select Current Setting: Override.
    4. Select Enable Third Party App Scan Analysis to enable communication between Workspace ONE and WildFire.
    5. Select Palo Alto Networks WildFire from the Choose App Scan Vendor drop-down.
    6. Enter your WildFire API key.
    7. Click Test Connection to ensure that Workspace ONE can communicate with WildFire. If the test is not successful, verify connectivity to the internet, re-enter the API key, and then try again.
    8. Save your changes. Workspace ONE schedules a synchronization task to communicate with WildFire to obtain the latest verdicts for application hashes and runs the task at regular intervals. Click Sync Now to initiate a manual sync with WildFire.

    © 2026 Palo Alto Networks, Inc. All rights reserved.