Palo Alto Networks Knowledgebase: Recommended update interval and timings for Dynamic Updates
Recommended update interval and timings for Dynamic Updates
Created On 09/25/18 19:36 PM - Last Updated 02/08/19 00:02 AM
This document describes the recommended update interval and timings for Dynamic Updates. The network load on the update server varies depending on the timing, and it's recommended to avoid relatively busy times to receive stable updates.
1. Update Interval (Recurrence)
A shorter recurrence setting is recommended, as it will trigger the next update sooner.
For example, if Recurrence is set to "Daily" and if Dynamic Update failed, the scheduled update won't happen until the next day. If it's set to "Hourly", the scheduled update will be triggered in our hour.
2. Update Timings (Minutes Past Hour / Minutes Past Half-Hour / Time)
The following timings are the ones that are recommended to be avoided:
PAN-OS 6.1 Time value can be selected from the pull down menu, and also can be modified manually.
PAN-OS 7.0Time value can be selected from the pull down menu, and also can be modified manually.
These recommendation settings can be applied to Antivirus, WildFire and "Application and Threats" signature updates. (Except for the case where WildFire update is configured as "Every Minute").
Please set a threshold that determines the amount of time the firewall waits before installing the latest content if necessary. For more detail, please refer to the Administrator's Guide ("Best Practices for Application and Threat Content Updates" section) and the article below.