WildFire WF-500 report submissions to the cloud are not visible on the WF portal

WildFire WF-500 report submissions to the cloud are not visible on the WF portal

8970
Created On 09/25/18 19:48 PM - Last Modified 02/07/19 23:58 PM


Resolution


When WF-500 appliance is configured to submit reports to the cloud using either commands

 

> set deviceconfig setting wildfire cloud-intelligence submit-report yes
> set deviceconfig setting wildfire cloud-intelligence submit-sample yes

 

the WildFire portal will not show corresponding entries for the uploads on the wildfire portal.

 

The submitted data is used only internally to contribute to WildFire statistics and threat intelligence.

 

On the WF-500, the "show wildfire local statistics  day <1-31>" command can be used to verify the submissions.

 

> show wildfire local statistics day 7 

----------------------------------------------------------
| General Stats |
+--------------------------------------------------------+

Total Disk Usage: 66/1283(GB) (5%)

||+---------------------------+----------+-+-----------+||
||| Sample Queue |||
||+-----------------+-------------------+--------------+||
||| SUBMITTED | ANALYZED | PENDING |||
||+---------------------------+----------+-+-----------+||
||| 236 | 236 | 0 |||
||+--------------------------+-----------+-+----------+|||

|+--------------------------+---------------------------+|
||| Verdicts |||
||+-------------------------+--------------------------+||
||| Malware | Grayware | Benign | Error |||
||+-----------------------------+----------------------+||
||| 2 | 0 | 234 | 0 |||

|+--------------------------+---------------------------+|
||| Session and Upload Count |||
||+------------------------+---------------------------+||
||| Sessions | Uploads |||
||+---------------------------+------------------------+||
||| 313 | 3 |||
||+---------------------------+------------------------+||

 

For WF-500 running PAN-OS 7.1 or earlier, use the "show wildfire statistics" command to verify the submissions.

 

> show wildfire statistics 

Last one hour statistics :
Total sessions submitted :            456
Samples submitted        :            10
  analyzed               :            10
  pending                :            0
  malicious              :            6
  benign                 :            4
  error                  :            0
  uploaded               :            10


How to Interpret the "show wildfire statistics" Command Output on WF-500



Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000CldqCAC&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Choose Language