Compressed and Encoded File Analysis
| Where Can I Use
This? | What Do I Need? |
|---|
Prisma Access (Managed by Strata Cloud Manager) Prisma Access (Managed by Panorama) NGFW (Managed by Strata Cloud Manager) NGFW (Managed by PAN-OS or Panorama) VM-Series CN-Series
|
Advanced WildFire License For Prisma Access, this is usually included with your
Prisma Access license.
|
By default, the firewall decodes files that have been encoded
or compressed up to four times, including files that have been compressed
using the ZIP format. The firewall then inspects and enforces policy
on the decoded file; if the file is unknown, the firewall forwards
the decoded file for WildFire analysis. While the firewall cannot
forward complete ZIP archive files for Advanced WildFire analysis,
you can submit files directly to the Advanced WildFire public cloud
using the WildFire portal or the WildFire API.
RAR and 7-Zip archive files are not decoded by the firewall.
All processing of these files occurs in the Advanced WildFire public cloud.
