Sample Removal Request

Table of Contents

Firewall File-Forwarding Capacity by Model

Sample Removal Request

Where Can I Use This?	What Do I Need?
Prisma Access (Managed by Strata Cloud Manager) Prisma Access (Managed by Panorama) NGFW (Managed by Strata Cloud Manager) NGFW (Managed by PAN-OS or Panorama) VM-Series CN-Series	Advanced WildFire License For Prisma Access, this is usually included with your Prisma Access license.

Unique samples sent to the Advanced WildFire cloud for analysis can be deleted at the discretion of the user. This allows users who are subject to data protection policies, including those who must comply with GDPR, to permanently dispose of sample data based on their organization’s retention policies. Sample data includes session / upload data and the sample file itself.

Create a text file with a list of SHA256 or MD5 hashes of the samples to be deleted. Each hash must be on an individual line in the file and can include up to 100 samples.

Only files that are unique to your environment can be deleted. If files are found to be available in other public or private feeds, only the session and upload data for a given account is removed.
Log in to the WildFire portal using your Palo Alto Networks support credentials or your WildFire account.
Select Settings on the menu bar.
Click Choose File and select the hash list text file that you created in step 1 and then Remove Samples. You will receive a confirmation upon a successful file upload.
After the samples are removed from the WildFire cloud, you will receive a confirmation email with the details of the request. This includes a list of the samples that were requested to be deleted, and the removal status of each sample. This process can take up to 7 days.

Samples that do not exist or are not unique to your environment will return statuses of Not found and Rejected, respectively.

Verify File Forwarding

Firewall File-Forwarding Capacity by Model