RAR file with WildFire verdict malware did not block by Palo Alto Networks Firewall

RAR file with WildFire verdict malware did not block by Palo Alto Networks Firewall

6030
Created On 03/16/20 08:35 AM - Last Modified 03/20/20 09:23 AM


Question


Some RAR file with WildFire verdict malware did not block by Palo Alto Networks Firewall

Answer



WildFire Analysis -> verdict support RAR file including up to latest RAR 5.0 file format.

However WildFire-virus/Anti-virus signature to block malware on Palo Alto Networks file is currently supports most RAR file EXCEPT RAR 5.0 file format.


Additional Information


https://docs.paloaltonetworks.com/wildfire/9-1/wildfire-admin/wildfire-overview/wildfire-concepts/file-analysis.html
https://en.wikipedia.org/wiki/RAR_(file_format)#Versions


Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000PP3NCAW&lang=en_US&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail