Device > Setup > WildFire
to configure WildFire settings on the firewall and Panorama. You can enable both the WildFire cloud and a WildFire appliance to be used to perform file analysis. You can also set file size limits and session information that will be reported. After populating WildFire settings, you can specify what files to forward to the WildFire cloud or the WildFire appliance by creating a
WildFire Analysisprofile (
To forward decrypted content to WildFire, you need to select
Allow Forwarding of Decrypted Contentin
WildFire Public Cloud
wildfire.paloaltonetworks.comto send files to the WildFire global cloud, hosted in the United States, for analysis. Alternatively, you can instead send files to a WildFire regional cloud for analysis. Regional clouds are designed to adhere to the data privacy expectations you might have depending on your location.
WildFire Private Cloud
Specify the IP address or FQDN of the WildFire appliance.
The firewall sends files for analysis to the specified WildFire appliance.
Panorama collects threat IDs from the WildFire appliance to enable the addition of threat exceptions in Anti-Spyware profiles (for DNS signatures only) and Antivirus profiles that you configure in device groups. Panorama also collects information from the WildFire appliance to populate fields that are missing in the WildFire Submissions logs received from firewalls running software versions earlier than PAN-OS 7.0.
File Size Limits
Specify the maximum file size that will be forwarded to the WildFire server. Available ranges are:
The preceding values might differ based on the current version of PAN-OS or the content release. To see valid ranges, click in the
Size Limitfield; a pop-up displays the available range and default value.
Report Benign Files
When this option is enabled (disabled by default), files analyzed by WildFire that are determined to be benign will appear in the
Even if this option is enabled on the firewall, email links that WildFire deems benign will not be logged because of the potential quantity of links processed.
Report Grayware Files
When this option is enabled (disabled by default), files analyzed by WildFire that are determined to be grayware will appear in the
Even if this option is enabled on the firewall, email links that WildFire determines to be grayware will not be logged because of the potential quantity of links processed.
Session Information Settings
Specify the information to be forwarded to the WildFire server. By default, all are selected:
Recommended For You
Recommended videos not found.