Palo Alto Networks – Advanced WildFire

Advanced WildFire is the cloud-delivered malware analysis and prevention service from Palo Alto Networks, the current packaging of what was long marketed simply as WildFire. It examines unknown files and links using static analysis, dynamic analysis in a custom-built hypervisor, and several machine-learning engines, then turns verdicts into protections that reach firewalls, cloud and endpoint enforcement points. An inline machine-learning engine can stop malicious content in common file types without waiting for a cloud verdict, and content-based signatures instead of simple hashes are meant to cover large families of polymorphic variants with a single update. Analysis draws on threat data contributed by the vendor's wider customer base, and the company says its Code Gene approach fingerprints the structure and logic of code so related samples share protection. Customers can pick from regional cloud locations to meet data residency needs, and an API lets other applications, such as customer-facing upload portals, submit files for the same analysis. The service is sold as a subscription that works with PAN-OS next-generation firewalls and the broader Palo Alto Networks platform, so it fits organizations that already enforce policy on those gateways and want sandbox verdicts applied automatically. Teams that do not run Palo Alto Networks enforcement points will find it less useful as a standalone sandbox.