Preventing known malware from transferring while real-time signature lookups are
underway often introduces a window of risk. If you have an active WildFire® or
Advanced WildFire license, Prisma® Access now supports WildFire Hold Mode to
immediately address this risk. Hold Mode enables you to configure Prisma® Access to
hold the transfer of a sample file while
the real-time signature cloud performs a signature lookup. When the lookup
completes, Prisma Access releases the file to the requesting client (or blocks it,
based on your organization's security policy for specific WildFire verdicts,
preventing the initial transfer of known malware. You can configure Hold Mode on a
per antivirus profile basis and apply a global setting for the signature lookup
timeout and the associated action.