How to Test WildFire with a Fake Malicious File - Knowledge Base - Palo Alto Networks

How to Test WildFire with a Fake Malicious File

75306

Created On 09/26/18 13:47 PM - Last Modified 02/04/25 22:23 PM

WildFire Submissions Log

Threat Intelligence

8.1

9.0

9.1

10.0

10.1

WildFire

Environment

During the deployment of WildFire or WF-500 customers may want to test the download of malicious files. Since WildFire does not forward files that are known or signed by a trusted file signer, Palo Alto Networks provides a mechanism to easily test this setup.
Palo Alto Networks randomly generates a test file and provides it at the following URL:

The purpose of this test file is strictly for testing file forwarding to the WildFire Cloud (public and private WF-500).
Note that there will be no signature created for these test PE files, therefore the test file will never be blocked as virus or wildifre-virus even if Antivirus Profile is configured for the policy.

We also have other file types than PE. Please refer to the WildFire Administrator's Guide for more details.
Make sure DSRI is not checked on the Security Policy rule when testing malware samples from our test malware site.

PAN-OS Software Updates