1. A system, comprising: a processor configured to: receive a potential malware sample from a firewall; analyze the potential malware sample using a virtual machine to determine if the potential malware sample is malware; and automatically generate a signature if the potential malware sample is determined to be malware; and a memory coupled to the processor and configured to provide the processor with instructions.