Increased WildFire File-Forwarding Capacity

The quantity and maximum size of files that a PAN-OS 9.0 firewall can forward to WildFire is increased to provide greater visibility and detection of uncommonly large malicious samples.
The maximum and default WildFire® file-forwarding sizes and rates are increased in PAN-OS® 9.0 to provide optimal visibility and detection. Based on Palo Alto Networks data analytics, the new default capacities protect against the majority of threats;it is a best practice to use these new default values.
The forwarding capacities for Traps, Aperture, and Magnifier did not change. For additional information about the file-forwarding capacity of these products and other public and API integrations, refer to the product documentation.
File Type
PAN-OS 9.0 Default File Forwarding Sizes
PAN-OS 9.0 Size Limits
pe
16MB
1-50MB
apk
10MB
1-50MB
pdf
3,072KB
100-51,200KB
ms-office
16,384KB
200-51,200KB
jar
5MB
1-20MB
flash
5MB
1-10MB
MacOSX
10MB
1-50MB
archive
50MB
1-50MB
linux
50MB
1-50MB
The default forwarding values might change over time based on the current version of PAN-OS or the content release version. To view the file size ranges and defaults:
  • Web Interface
    (
    Device > Setup > WildFire > General Settings
    )—Select and clear a
    Size Limit
    field and then press enter to update the field.
  • CLI
    —From a terminal emulator, connect to the firewall CLI and issue the following command:
    show wildfire file-size-limits
    .
  1. wf-file-size-limits.png
    As a WildFire best practice, Palo Alto Networks recommends using the default file-forwarding sizes. These values are designed to include the vast majority of malware that you are likely to encounter in real-world scenarios. Very large files that are beyond these size limits are excluded.

Related Documentation