Compressed and Encoded File Analysis

By default, the firewall decodes files that have been encoded or compressed up to four times, including files that have been compressed using the ZIP format. The firewall then inspects and enforces policy on the decoded file; if the file is unknown, the firewall forwards the decoded file for WildFire analysis.
RAR and 7-Zip archive files are not decoded by the firewall. All processing of these files occurs in the WildFire public cloud.

Related Documentation