Recommended update interval and timings for Dynamic Updates

Recommended update interval and timings for Dynamic Updates

39976
Created On 09/25/18 19:36 PM - Last Updated 08/03/20 20:30 PM


Symptom
Recommended update interval and timings for Dynamic Updates. The network load on the update server varies depending on the timing, and it's recommended to avoid relatively busy times to receive stable updates. 

Environment
  • PAN-OS


Resolution

Recommendation:

  1. Update Interval (Recurrence)
A shorter recurrence setting is recommended, as it will trigger the next update sooner.

For example, if Recurrence is set to "Daily" and if Dynamic Update failed, the scheduled update won't happen until the next day. If it's set to "Hourly", the scheduled update will be triggered in our hour.
 
  1. Update Timings (Minutes Past Hour / Minutes Past Half-Hour / Time)
The following timings are the ones that are recommended to be avoided:
00/01/02/03/05/10/15/16/20/25/30/31/35/40/45/46/50/55 min

Screen Shot 2018-05-25 at 2.46.46 PM.png

PAN-OS 6.1 
Time value can be selected from the pull down menu, and also can be modified manually.

6.1.png

PAN-OS 7.0
                                       
Time value can be selected from the pull down menu, and also can be modified manually.
7.1.png

PAN-OS 8.0   
8.0.png
 

PAN-OS 8.1
8.1.png


These recommendation settings can be applied to Antivirus, WildFire and "Application and Threats" signature updates. (Except for the case where WildFire update is configured as "Every Minute").

Please set a threshold that determines the amount of time the firewall waits before installing the latest content if necessary.                                 



Additional Information

For more detail, please refer to the Administrator's Guide ("Best Practices for Application and Threat Content Updates" section) and the article below.



Attachments
Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClaECAS&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Attachments
Choose Language