Palo Alto Networks Knowledgebase: Recommended update interval and timings for Dynamic Updates

Recommended update interval and timings for Dynamic Updates

16148
Created On 02/08/19 00:02 AM - Last Updated 02/08/19 00:02 AM
Resolution

Introduction:

This document describes the recommended update interval and timings for Dynamic Updates. The network load on the update server varies depending on the timing, and it's recommended to avoid relatively busy times to receive stable updates. 

 

Recommendation:

1. Update Interval (Recurrence)

A shorter recurrence setting is recommended, as it will trigger the next update sooner.

 

For example, if Recurrence is set to "Daily" and if Dynamic Update failed, the scheduled update won't happen until the next day. If it's set to "Hourly", the scheduled update will be triggered in our hour.

 

2. Update Timings (Minutes Past Hour / Minutes Past Half-Hour / Time)

The following timings are the ones that are recommended to be avoided:

00/01/02/03/05/10/15/16/20/25/30/31/35/40/45/46/50/55 min

 

Screen Shot 2018-05-25 at 2.46.46 PM.png

 

6.1.pngPAN-OS 6.1                                       Time value can be selected from the pull down menu, and also can be modified manually.

 

7.1.pngPAN-OS 7.0                                       Time value can be selected from the pull down menu, and also can be modified manually.

 

8.0.pngPAN-OS 8.0                   

8.1.pngPAN-OS 8.1

 

These recommendation settings can be applied to Antivirus, WildFire and "Application and Threats" signature updates. (Except for the case where WildFire update is configured as "Every Minute").

 

Please set a threshold that determines the amount of time the firewall waits before installing the latest content if necessary. For more detail, please refer to the Administrator's Guide ("Best Practices for Application and Threat Content Updates" section) and the article below.

 

 

See Also:

https://www.paloaltonetworks.com/documentation/document-search?q=Best+Practices+for+Application+and+Threat+Content+Updates

https://live.paloaltonetworks.com/t5/Management-Articles/Dynamic-updates-scheduled-with-a-threshold-set-but-are-never-or/ta-p/65952

                                   



Attachments
Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClaECAS&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Attachments
Choose Language