While a quote is being finalized for a customer that is purchasing multiple PA-5400 series firewalls, the customer specifies the need for protection against zero-day malware attacks. Which Cloud-Delivered Security Services (CDSS) subscription add-on license should be included in the quote?

Advanced WildFire is Palo Alto Networks’ cloud-delivered sandbox that uses static analysis, dynamic analysis, and inline machine-learning to detect and block previously unknown (zero-day) malware before it can execute. Zero-day malware protection is therefore provided by the Advanced WildFire CDSS add-on.

A. AI Access Security focuses on SaaS application usage and is unrelated to malware detection.
B. Advanced Threat Prevention stops zero-day network exploits, not unknown malware files.
D. App-ID is a built-in PAN-OS feature for application identification and is not a CDSS subscription.

1. Palo Alto Networks, “Advanced WildFire Datasheet,” 2023, p.1: “Stops zero-day malware, exploits, and ransomware.”

2. Palo Alto Networks, “Cloud-Delivered Security Services Overview,” Dec-2023, p.4, ‘Advanced WildFire’.