Recommended update interval and timings for Dynamic Updates
103887
Created On 09/25/18 19:36 PM - Last Modified 08/03/20 20:30 PM
Symptom
Recommended update interval and timings for Dynamic Updates. The network load on the update server varies depending on the timing, and it's recommended to avoid relatively busy times to receive stable updates.
Environment
- PAN-OS
Resolution
Recommendation:
- Update Interval (Recurrence)
For example, if Recurrence is set to "Daily" and if Dynamic Update failed, the scheduled update won't happen until the next day. If it's set to "Hourly", the scheduled update will be triggered in our hour.
- Update Timings (Minutes Past Hour / Minutes Past Half-Hour / Time)
00/01/02/03/05/10/15/16/20/25/30/31/35/40/45/46/50/55 min
PAN-OS 6.1
Time value can be selected from the pull down menu, and also can be modified manually.
PAN-OS 7.0
Time value can be selected from the pull down menu, and also can be modified manually.
PAN-OS 8.0
PAN-OS 8.1
These recommendation settings can be applied to Antivirus, WildFire and "Application and Threats" signature updates. (Except for the case where WildFire update is configured as "Every Minute").
Please set a threshold that determines the amount of time the firewall waits before installing the latest content if necessary.
Additional Information
For more detail, please refer to the Administrator's Guide ("Best Practices for Application and Threat Content Updates" section) and the article below.