The WildFire™ cloud service analyzes files and email links to detect threats and create protections to block malware. When WildFire identifies a zero-day threat, it can globally distribute protection for that threat within five minutes. The WildFire Administrator's Guide describes how WildFire works, how to start forwarding unknown files to WildFire for analysis, and how to block malware that WildFire identifies. 

You'll also find everything you need to set up and manage a WildFire appliance—the WildFire appliance is an on-premise WildFire solution for organizations that cannot send files out of the network for analysis.