Palo Alto Networks Advanced WildFire
Automatically prevent unknown malware. Keep your files safe with one of the industry’s largest threat intelligence and malware prevention engines.
Unknown threats bypass signature-based protection
Attackers produce new malware variants every day. Protection that relies only on signatures cannot recognise files it has never seen. Advanced WildFire puts unknown files and links passing through the firewall through multi-stage analysis in the cloud, identifies the malicious ones and distributes protection signatures automatically.
How does WildFire work?
- Static analysis: the file’s structure and content are examined without executing it.
- Machine learning: models trained on billions of samples classify unknown files.
- Dynamic analysis (sandbox): suspicious files are executed in an isolated environment and their behaviour is observed.
- Evasion-resistant analysis: dedicated environments for malware that detects sandboxes and hides its behaviour.
- Automatic protection: protection for a detected threat is pushed to firewalls automatically.
Benefits of Advanced WildFire
- Automatic prevention of zero-day malware and targeted attacks
- Less manual analysis, so the SOC team can focus on real threats
- Shared threat intelligence with Advanced Threat Prevention, URL Filtering and DNS Security
- Integrated protection with Cortex XDR and Prisma Access
Deploying WildFire with Albisec
Albisec handles WildFire licensing, the policy design that decides which file types and applications are sent for analysis, the SSL decryption scope (so files inside encrypted traffic become visible) and reporting. Our health check service can verify whether WildFire is working efficiently on your existing firewall.
More Palo Alto Networks security services
Frequently asked questions
What is Advanced WildFire?
Advanced WildFire is Palo Alto Networks’ cloud-based malware analysis and prevention service. It inspects unknown files and links passing through the firewall using static analysis, dynamic analysis (sandboxing) and machine learning; protections for anything found to be malicious are distributed automatically to all customers.
Is WildFire a sandbox?
It uses a sandbox for dynamic analysis, but it is much more than that. It combines static analysis, machine learning, memory analysis and evasion-resistant analysis environments.
Can we use WildFire without sending our files to the cloud?
For organisations with data residency requirements, the file types that are forwarded can be limited by policy, and an on-premises WF-500 appliance is also available. We can assess the right model together.
Talk to our experts about your Palo Alto Networks project
A new deployment, a firewall migration or a support contract: tell us what you need and we will map out the right path with a free initial assessment.