Palo Alto Networks Knowledgebase: How to Set the Maximum File Size Limit for WildFire

How to Set the Maximum File Size Limit for WildFire

(1311 Views)
Created On 09/25/18 17:36 PM - Last Updated 09/25/18 23:10 PM
Categories:  WildFire

Issue:


Solution:


Overview

This document describes how to set the maximum file sizes for WildFire.

 

  • On PAN-OS 6.1, WildFire supports the following file types and sizes:
         File Type        Size RangeDefault Size

    pe

    1-10 MB10 MB
    apk1-50 MB10 MB
    pdf100-1000 KB500 KB
    ms-office200-10000 KB 500 KB
    jar1-10 MB1 MB


  •  On PAN-OS 7.1 and above, WildFire supports the following file types and sizes: 
         File Type        Size RangeDefault Size

    pe

    1-10 MB10 MB
    apk1-50 MB10 MB
    pdf100-1000 KB500 KB
    ms-office200-10000 KB 500 KB
    jar1-10 MB1 MB
    flash1-10 MB5 MB
    MacOSX1-50 MB1 MB


  •  Content version 741 added support for .7zip and .rar as 'archive' (PAN-OS 7.1 and above):
         File Type        Size RangeDefault Size

    archive

    1-50 MB10 MB

 

  •  Content version 745 added support for 'linux' file type (PAN-OS 8.0 and above)
         File Type        Size RangeDefault Size

    linux

    1-10 MB2 MB

 

Details

Go to Device > Setup > WildFire > General Settings and enter the values for each of the supported file types:

 

PAN-OS 6.1:

6.1.png

 

PAN-OS 7.1:

Screen Shot 2017-11-09 at 6.55.31 PM.png

 

PAN-OS 8.0:

8.0.pngContent version 745 added the 'Linux' file type to PAN-OS 8.0

Note: When the default size limit is changed by a new content release and if the maximum size limit is increased by the change, you will need to perform following steps in order to reflect the change to the internal queue size that the firewall has. (Details below.)

 

  1. Review and change desired file size limits in the WildFire setting. (Device > Setup > WildFire)
  2. Config commit

 

Caveat: Before files are uploaded to WildFire cloud, they are stored in an internal queue on the firewall. The capacity size varies depending on the firewall platform and the number of files that the firewall can store is calculated based on the maximum size limit among all the file types except APK. Please take note of this and change the value with care when you increase the size limit.

 

For example, the capacity of PA-200 platform is 100MB, and when the max size is 10MB, the File limit becomes 100 / 10 = 10.

 

admin@PA-200> show wildfire disk-usage

 

Disk usage for wildfire:

Total disk usage:                            0

Total temporary files:                       0

File limit:          10 (Global), 10 (Channel)

 

 If the command shows different value, please follow the steps above (1 & 2) to reflect the change.

Attachments:

Actions:
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClGoCAK&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Change Language: