Firewall Forwarding
Focus
Focus
Advanced WildFire Powered by Precision AI™

Firewall Forwarding

Table of Contents

Firewall Forwarding

Where Can I Use This?What Do I Need?
  • Prisma Access (Managed by Strata Cloud Manager)
  • Prisma Access (Managed by Panorama)
  • NGFW (Managed by Strata Cloud Manager)
  • NGFW (Managed by PAN-OS or Panorama)
  • VM-Series
  • CN-Series
  • Advanced WildFire License
    For Prisma Access, this is usually included with your Prisma Access license.
The firewall forwards unknown samples, as well as blocked files that match antivirus signatures, for Advanced WildFire analysis based on the configured WildFire Analysis profile settings (ObjectsSecurity ProfilesWildFire Analysis). In addition to detecting links included in emails, files that are attached to emails, and browser-based file downloads, the firewall leverages the App-ID to detect file transfers within applications. For samples that the firewall detects, the firewall analyzes the structure and content of the sample and compares it against existing signatures. If the sample matches a signature, the firewall applies the default action defined for the signature (allow, alert, or block). If the sample matches an antivirus signature or if the sample remains unknown after comparing it against Advanced WildFire signatures, the firewall forwards it for Advanced WildFire analysis.
By default, the firewall also forwards information about the session in which an unknown sample was detected. To manage the session information that the firewall forwards, select DeviceSetupWildFire and edit Session Information Settings.