By default, the firewall decodes files that have been
encoded or compressed up to four times, including files that have
been compressed using the ZIP format. The firewall then inspects
and enforces policy on the decoded file; if the file is unknown,
the firewall forwards the decoded file for WildFire analysis. While
the firewall cannot forward complete ZIP archive files for WildFire
analysis, you can submit files directly to the WildFire public cloud
using the WildFire portal or the WildFire API.
RAR and 7-Zip archive files are not decoded by the firewall.
All processing of these files occurs in the WildFire public cloud.