Focus

WildFire What's New Guide

WildFire Saudi Arabia Cloud

Table of Contents

WildFire Saudi Arabia Cloud

Palo Alto Networks now provides access to a WildFire regional cloud in Saudi Arabia.

A new WildFire regional cloud is now available in Saudi Arabia. The WildFire Saudi Arabia cloud provides the best of both worlds for Palo Alto Networks customers located in Saudi Arabia — customers can now utilize the WildFire cloud-based threat analysis and prevention engine, while ensuring that files submitted for analysis stay in the country to address data location concerns. Note that certain metadata connected to submitted samples, as described in the WildFire Privacy Datasheet, are shared with our other regional clouds. While submissions stay within the borders of Saudi Arabia, customers still benefit from the global security intelligence and updates based on the network effect of Palo Alto Networks 42,000+ WildFire customers. Sensitive data and submissions are restricted from leaving Saudi Arabia when using the WildFire cloud threat analysis service. Samples submitted to the WildFire Saudi Arabia cloud and the resulting malware analysis, signature generation and delivery occur and remain within the borders of Saudi Arabia.

Any firewall with basic WildFire service enabled can forward PE (portable executables) samples to the WildFire Saudi Arabia cloud for analysis, while users with an active Advanced WildFire or standard WildFire subscription can forward all supported file types. You can access the WildFire Saudi Arabia portal using your support account credentials to manually upload files for analysis and view WildFire analysis reports.

You can submit samples to the WildFire Saudi Arabia cloud from the WildFire appliance, WildFire Saudi Arabia portal, through the WildFire API, and all Palo Alto Networks platforms that support the WildFire security subscription integration.

Submit samples to the WildFire Saudi Arabia cloud from the firewall.
1. Log in to the firewall and select Device > Setup > WildFire and edit General Settings.
2. Enter the URL for the WildFire Saudi Arabia cloud: sa.wildfire.paloaltonetworks.com
3. Click OK to save your settings.
Submit locally-discovered malware or sample reports to the WildFire Saudi Arabia cloud for additional analysis.
Enable a WildFire appliance to submit locally-discovered malware or sample reports to the WildFire Saudi Arabia cloud for additional analysis and signature distribution:
1. Connect the WildFire appliance to the WildFire Saudi Arabia cloud by entering the following command from the WildFire appliance CLI:
```
admin@WF-500# set
deviceconfig setting cloud-server sa.wildfire.paloaltonetworks.com
```
2. Enter the following command to submit malware to the WildFire Saudi Arabia cloud:
```
admin@WF-500# set
deviceconfig setting wildfire cloud-intelligence submit-sample yes
```
Manually submit samples to the WildFire Saudi Arabia cloud using the WildFire Saudi Arabia portal.

You can manually submit samples to the WildFire Saudi Arabia cloud using the WildFire Saudi Arabia portal: https://sa.wildfire.paloaltonetworks.com.

After uploading files or URLs to the WildFire Saudi Arabia portal, you can also view the WildFire analysis verdict and report for the sample.
Submit samples through the WildFire API
Use the following resources to submit samples through the WildFire API to the WildFire Saudi Arabia cloud:
- Submit a file: https://sa.wildfire.paloaltonetworks.com/publicapi/submit/file
- Submit a file through a URL: https://sa.wildfire.paloaltonetworks.com/publicapi/submit/url
- Submit a URL: https://sa.wildfire.paloaltonetworks.com/publicapi/submit/link
- Submit multiple URLs: https://sa.wildfire.paloaltonetworks.com/publicapi/submit/links
To get information about your file submissions to the WildFire Saudi Arabia cloud, you must also use the base URI that corresponds to the WildFire Saudi Arabia cloud. Example:
https://sa.wildfire.paloaltonetworks.com/publicapi/get/verdict

WildFire Spain Cloud

WildFire Israel Cloud