Home

Location

Documentation Home
Palo Alto Networks
Support
Live Community
Knowledge Base

Home
WildFire
WildFire Administrator's Guide
Use the WildFire Appliance CLI
Access the WildFire Appliance CLI
Establish a Direct Console Connection

Last Updated:

Tue Jun 07 17:56:05 UTC 2022

Current Version:

10.1

Version 10.2
Version 10.1
Version 10.0 (EoL)
Version 9.1

Table of Contents

Filter

WildFire Overview

About WildFire

WildFire Concepts

Samples

Firewall Forwarding

Session Information Sharing

Analysis Environment

Verdicts

File Analysis

Email Link Analysis

URL Analysis

Compressed and Encoded File Analysis

WildFire Signatures

WildFire Deployments

WildFire Public Cloud

WildFire Private Cloud

WildFire Hybrid Cloud

WildFire: U.S. Government Cloud

WildFire File Type Support

WildFire Subscription

WildFire Example

Get Started with WildFire

WildFire Deployment Best Practices

WildFire Best Practices

Submit Files for WildFire Analysis

Forward Files for WildFire Analysis

Forward Decrypted SSL Traffic for WildFire Analysis

Verify WildFire Submissions

Test a Sample Malware File

Verify File Forwarding

Manually Upload Files to the WildFire Portal

Submit Malware or Reports from the WildFire Appliance

Sample Removal Request

Firewall File-Forwarding Capacity by Model

Set Up and Manage a WildFire Appliance

About the WildFire Appliance

WildFire Appliance Interfaces

Configure the WildFire Appliance

Set Up Authentication Using a Custom Certificate on a Standalone WildFire Appliance

WildFire Appliance Mutual SSL Authentication

Configure Authentication with Custom Certificates on the WildFire Appliance

Set Up the WildFire Appliance VM Interface

Virtual Machine Interface Overview

Configure the VM Interface on the WildFire Appliance

Connect the Firewall to the WildFire Appliance VM Interface

Enable WildFire Appliance Analysis Features

Set Up WildFire Appliance Content Updates

Install WildFire Content Updates Directly from the Update Server

Install WildFire Content Updates from an SCP-Enabled Server

Enable Local Signature and URL Category Generation

Submit Locally-Discovered Malware or Reports to the WildFire Public Cloud

Upgrade a WildFire Appliance

Monitor WildFire Activity

About WildFire Logs and Reporting

Use the Firewall to Monitor Malware

Configure WildFire Submissions Log Settings

Enable Logging for Benign and Grayware Samples

Include Email Header Information in WildFire Logs and Reports

Monitor WildFire Submissions and Analysis Reports

Set Up Alerts for Malware

Use the WildFire Portal to Monitor Malware

Configure WildFire Portal Settings

Add WildFire Portal Users

View Reports on the WildFire Portal

Use the WildFire Appliance to Monitor Sample Analysis Status

View WildFire Analysis Environment Utilization

View WildFire Sample Analysis Processing Details

Use the WildFire CLI to Monitor the WildFire Appliance

View the WildFire Appliance System Logs

WildFire Analysis Reports—Close Up

WildFire Appliance Clusters

WildFire Appliance Cluster Resiliency and Scale

WildFire Cluster High Availability

Benefits of Managing WildFire Clusters Using Panorama

WildFire Appliance Cluster Management

Deploy a WildFire Cluster

Configure a Cluster Locally on WildFire Appliances

Configure a Cluster and Add Nodes Locally

Configure General Cluster Settings Locally

Remove a Node from a Cluster Locally

Configure WildFire Appliance-to-Appliance Encryption

Configure Appliance-to-Appliance Encryption Using Predefined Certificates Through the CLI

Configure Appliance-to-Appliance Encryption Using Custom Certificates Through the CLI

Monitor a WildFire Cluster

View WildFire Cluster Status Using the CLI

WildFire Application States

WildFire Service States

Upgrade WildFire Appliances in a Cluster

Upgrade a Cluster Locally with an Internet Connection

Upgrade a Cluster Locally without an Internet Connection

Troubleshoot a WildFire Cluster

Troubleshoot WildFire Split-Brain Conditions

What Causes a Split-Brain Condition?

Determine if the WildFire Cluster is in a Split-Brain Condition

Recover From a Split-Brain Condition

Use the WildFire Appliance CLI

WildFire Appliance Software CLI Concepts

WildFire Appliance Software CLI Structure

WildFire Appliance Software CLI Command Conventions

WildFire Appliance CLI Command Messages

WildFire Appliance Command Option Symbols

WildFire Appliance Privilege Levels

WildFire CLI Command Modes

WildFire Appliance CLI Configuration Mode

Configuration Mode Command Usage

Configuration Hierarchy

Hierarchy Paths

Navigate the Hierarchy

WildFire Appliance CLI Operational Mode

Access the WildFire Appliance CLI

Establish a Direct Console Connection

Establish an SSH Connection

WildFire Appliance CLI Operations

Access WildFire Appliance Operational and Configuration Modes

Display WildFire Appliance Software CLI Command Options

Restrict WildFire Appliance CLI Command Output

Set the Output Format for WildFire Appliance Configuration Commands

WildFire Appliance Configuration Mode Command Reference

set deviceconfig cluster

set deviceconfig high-availability

set deviceconfig setting management

set deviceconfig setting wildfire

set deviceconfig system eth2

set deviceconfig system eth3

set deviceconfig system panorama local-panorama panorama-server

set deviceconfig system panorama local-panorama panorama-server-2

set deviceconfig system update-schedule

set deviceconfig system vm-interface

WildFire Appliance Operational Mode Command Reference

clear high-availability

create wildfire api-key

delete high-availability-key

delete wildfire api-key

delete wildfire-metadata

disable wildfire

edit wildfire api-key

load wildfire api-key

request cluster decommission

request cluster reboot-local-node

request high-availability state

request high-availability sync-to-remote

request system raid

request wildfire sample redistribution

request system wildfire-vm-image

request wf-content

save wildfire api-key

set wildfire portal-admin

show cluster all-peers

show cluster controller

show cluster data migration status

show cluster membership

show cluster task

show high-availability all

show high-availability control-link

show high-availability state

show high-availability transitions

show system raid

submit wildfire local-verdict-change

show wildfire

show wildfire global

show wildfire local

test wildfire registration

WildFire Overview
WildFire Deployment Best Practices
- WildFire Best Practices
Submit Files for WildFire Analysis
Set Up and Manage a WildFire Appliance
Monitor WildFire Activity
WildFire Appliance Clusters
Use the WildFire Appliance CLI

Document:WildFire Administrator's Guide

Establish a Direct Console Connection

Last Updated:

Tue Jun 07 17:56:05 UTC 2022

Current Version:

10.1

Version 10.2
Version 10.1
Version 10.0 (EoL)
Version 9.1

Table of Contents

Filter

WildFire Overview

About WildFire

WildFire Concepts

Samples

Firewall Forwarding

Session Information Sharing

Analysis Environment

Verdicts

File Analysis

Email Link Analysis

URL Analysis

Compressed and Encoded File Analysis

WildFire Signatures

WildFire Deployments

WildFire Public Cloud

WildFire Private Cloud

WildFire Hybrid Cloud

WildFire: U.S. Government Cloud

WildFire File Type Support

WildFire Subscription

WildFire Example

Get Started with WildFire

WildFire Deployment Best Practices

WildFire Best Practices

Submit Files for WildFire Analysis

Forward Files for WildFire Analysis

Forward Decrypted SSL Traffic for WildFire Analysis

Verify WildFire Submissions

Test a Sample Malware File

Verify File Forwarding

Manually Upload Files to the WildFire Portal

Submit Malware or Reports from the WildFire Appliance

Sample Removal Request

Firewall File-Forwarding Capacity by Model

Set Up and Manage a WildFire Appliance

About the WildFire Appliance

WildFire Appliance Interfaces

Configure the WildFire Appliance

Set Up Authentication Using a Custom Certificate on a Standalone WildFire Appliance

WildFire Appliance Mutual SSL Authentication

Configure Authentication with Custom Certificates on the WildFire Appliance

Set Up the WildFire Appliance VM Interface

Virtual Machine Interface Overview

Configure the VM Interface on the WildFire Appliance

Connect the Firewall to the WildFire Appliance VM Interface

Enable WildFire Appliance Analysis Features

Set Up WildFire Appliance Content Updates

Install WildFire Content Updates Directly from the Update Server

Install WildFire Content Updates from an SCP-Enabled Server

Enable Local Signature and URL Category Generation

Submit Locally-Discovered Malware or Reports to the WildFire Public Cloud

Upgrade a WildFire Appliance

Monitor WildFire Activity

About WildFire Logs and Reporting

Use the Firewall to Monitor Malware

Configure WildFire Submissions Log Settings

Enable Logging for Benign and Grayware Samples

Include Email Header Information in WildFire Logs and Reports

Monitor WildFire Submissions and Analysis Reports

Set Up Alerts for Malware

Use the WildFire Portal to Monitor Malware

Configure WildFire Portal Settings

Add WildFire Portal Users

View Reports on the WildFire Portal

Use the WildFire Appliance to Monitor Sample Analysis Status

View WildFire Analysis Environment Utilization

View WildFire Sample Analysis Processing Details

Use the WildFire CLI to Monitor the WildFire Appliance

View the WildFire Appliance System Logs

WildFire Analysis Reports—Close Up

WildFire Appliance Clusters

WildFire Appliance Cluster Resiliency and Scale

WildFire Cluster High Availability

Benefits of Managing WildFire Clusters Using Panorama

WildFire Appliance Cluster Management

Deploy a WildFire Cluster

Configure a Cluster Locally on WildFire Appliances

Configure a Cluster and Add Nodes Locally

Configure General Cluster Settings Locally

Remove a Node from a Cluster Locally

Configure WildFire Appliance-to-Appliance Encryption

Configure Appliance-to-Appliance Encryption Using Predefined Certificates Through the CLI

Configure Appliance-to-Appliance Encryption Using Custom Certificates Through the CLI

Monitor a WildFire Cluster

View WildFire Cluster Status Using the CLI

WildFire Application States

WildFire Service States

Upgrade WildFire Appliances in a Cluster

Upgrade a Cluster Locally with an Internet Connection

Upgrade a Cluster Locally without an Internet Connection

Troubleshoot a WildFire Cluster

Troubleshoot WildFire Split-Brain Conditions

What Causes a Split-Brain Condition?

Determine if the WildFire Cluster is in a Split-Brain Condition

Recover From a Split-Brain Condition

Use the WildFire Appliance CLI

WildFire Appliance Software CLI Concepts

WildFire Appliance Software CLI Structure

WildFire Appliance Software CLI Command Conventions

WildFire Appliance CLI Command Messages

WildFire Appliance Command Option Symbols

WildFire Appliance Privilege Levels

WildFire CLI Command Modes

WildFire Appliance CLI Configuration Mode

Configuration Mode Command Usage

Configuration Hierarchy

Hierarchy Paths

Navigate the Hierarchy

WildFire Appliance CLI Operational Mode

Access the WildFire Appliance CLI

Establish a Direct Console Connection

Establish an SSH Connection

WildFire Appliance CLI Operations

Access WildFire Appliance Operational and Configuration Modes

Display WildFire Appliance Software CLI Command Options

Restrict WildFire Appliance CLI Command Output

Set the Output Format for WildFire Appliance Configuration Commands

WildFire Appliance Configuration Mode Command Reference

set deviceconfig cluster

set deviceconfig high-availability

set deviceconfig setting management

set deviceconfig setting wildfire

set deviceconfig system eth2

set deviceconfig system eth3

set deviceconfig system panorama local-panorama panorama-server

set deviceconfig system panorama local-panorama panorama-server-2

set deviceconfig system update-schedule

set deviceconfig system vm-interface

WildFire Appliance Operational Mode Command Reference

clear high-availability

create wildfire api-key

delete high-availability-key

delete wildfire api-key

delete wildfire-metadata

disable wildfire

edit wildfire api-key

load wildfire api-key

request cluster decommission

request cluster reboot-local-node

request high-availability state

request high-availability sync-to-remote

request system raid

request wildfire sample redistribution

request system wildfire-vm-image

request wf-content

save wildfire api-key

set wildfire portal-admin

show cluster all-peers

show cluster controller

show cluster data migration status

show cluster membership

show cluster task

show high-availability all

show high-availability control-link

show high-availability state

show high-availability transitions

show system raid

submit wildfire local-verdict-change

show wildfire

show wildfire global

show wildfire local

test wildfire registration

WildFire Overview
WildFire Deployment Best Practices
- WildFire Best Practices
Submit Files for WildFire Analysis
Set Up and Manage a WildFire Appliance
Monitor WildFire Activity
WildFire Appliance Clusters
Use the WildFire Appliance CLI

Establish a Direct Console Connection

Use the following settings for direct console connection:

Data rate: 9600

Data bits: 8

Parity: none

Stop bits: 1

Flow control: None

Most Popular

Recommended For You

Recommended Videos

Recommended videos not found.

© 2023 Palo Alto Networks, Inc. All rights reserved.