>
    Schedule Dynamic Content Updates
    Focus
    Download PDF
    Focus
    1. Home
    2. Next-Generation Firewall
    3. Update Firewalls
    4. Schedule Dynamic Content Updates
    Download PDF
    Next-Generation Firewall

    Schedule Dynamic Content Updates

    Table of Contents

    Schedule Dynamic Content Updates

    Schedule Antivirus, Application and Threats, and WildFire dynamic content updates for your firewalls.
    Contact your account team to enable Cloud Management for NGFWs using Strata Cloud Manager.
    Where Can I Use This?
    What Do I Need?
    • NGFW (Managed by Strata Cloud Manager)
    • VM-Series, funded with Software NGFW Credits
    • AIOps for NGFW Premium license (use the Strata Cloud Manager app)
    To ensure that you’re always protected from the latest threats, including those that haven’t yet been discovered, you must ensure that you keep your firewalls up to date with the latest content and software updates published by Palo Alto Networks.
    To install the latest Antivirus, Applications and Threats, and WildFire dynamic content updates on your firewalls, you can schedule a recurring update schedule to specify which dynamic content update to install. A Dynamic Update schedule can be configured at the snippet, folder, or firewall level. A Dynamic Update schedule created at the folder level is inherited by all nested folders and associated firewalls but can be modified for the nested folder or individual firewall.
    1. Log in to
      Strata Cloud Manager
      .
    2. Select
      Manage
      Configuration
      NGFW and Prisma Access
      Device Settings
      Device Setup
       and select the Configuration Scope where you want to create the Dynamic Updates schedule.
      You can select a folder or firewall from your
      Folders
       or select
      Snippets
       to configure the Dynamic Update schedule in a snippet.
    3. Click the cog wheel to edit the Management Interface Settings and
      Customize
      .
      If you modified the Dynamic Updates Scheduler for a nested folder or individual device, you can
      Revert to Inherited
       to revert the Dynamic Updates Scheduler configuration from the
      Customized
       configuration to that inherited from the parent folder of the nester folder or that inherited from the folder the firewall is associated with.
    4. Configure the
      Antivirus
       and
      Application and Threats
       dynamic content update schedule.
      1. Configure the Recurrence the firewall checks for Antivirus and Application and Threats dynamic content updates.
        • None
          —No new dynamic content updates are retrieved or installed.
        • (
          Application and Threats only
          )
          Every 30 Minutes
          —Firewall checks for new dynamic content updates every 30 minutes and installs a new content update if available.
          Specify how many
          Minutes Past Half-Hour
           the firewall should check for new dynamic content updates (between
          0
           and
          29
          ).
        • Hourly
          —Firewall checks for new content updates every hour and installs a new dynamic content update if available.
          Specify how many
          Minutes Past Hour
           the firewall should check for new dynamic content updates (between
          0
           and
          59
          ).
        • Daily
          —Firewall checks for new dynamic content updates every day and installs a new dynamic content update if available.
          Specify the
          Time
           of day the firewall should check for new dynamic content updates.
        • Weekly
          —Firewall checks for new dynamic content updates every week and installs a new dynamic content update if available.
          Specify the
          Day
           and
          Time
           the firewall should check for new dynamic content updates.
      2. Configure the Action the firewall takes when a new dynamic content update is available.
        • None
          —Firewall doesn’t download or install the new dynamic content update.
        • Download Only
          —Firewall only downloads the new dynamic content update but doesn’t install.
          If you select
          Download Only
          , you must log in to the firewall web interface and install the dynamic content update.
        • Download and Install
          —Firewall downloads and installs the new dynamic content update.
      3. Configure the dynamic content update Threshold.
        This specifies the dynamic content update must be this many hours old in order for the Action to be taken (between (
        1
         and
        336
         hours).
      4. (
        Application and Threats only
        ) Configure the New App-ID Threshold.
        This specifies the amount of time the firewall waits to install a dynamic content update that contains a new App-ID (between (
        1
         and
        336
         hours).
      5. (
        HA only
        ) Check (enable)
        Sync to Peer
         to also install the Antivirus and Application and Threats dynamic content update on the firewall HA peer.
    5. Configure the
      WildFire
       dynamic content update schedule.
      1. Configure the Recurrence the firewall checks for WildFire dynamic content updates.
        • None
          —No new dynamic content updates are retrieved or installed.
        • Every Minute
          —Firewall checks for new dynamic content updates every minute and installs a new content update if available.
        • Every 15 Minutes
          —Firewall checks for new dynamic content updates every 15 minutes and installs a new content update if available.
          Specify how many
          Minutes Past Quarter-Hour
           the firewall should check for new dynamic content updates (between
          0
           and
          14
          ).
        • Every 30 Minutes
          —Firewall checks for new dynamic content updates every 30 minutes and installs a new content update if available.
          Specify how many
          Minutes Past Half-Hour
           the firewall should check for new dynamic content updates (between
          0
           and
          29
          ).
        • Every Hour
          —Firewall checks for new content updates every hour and installs a new dynamic content update if available.
          Specify how many
          Minutes Past Hour
           the firewall should check for new dynamic content updates (between
          0
           and
          59
          ).
      2. Configure the Action the firewall takes when a new dynamic content update is available.
        • None
          —Firewall doesn’t download or install the new dynamic content update.
        • Download Only
          —Firewall only downloads the new dynamic content update but doesn’t install.
          If you select
          Download Only
          , you must log in to the firewall web interface and install the dynamic content update.
        • Download and Install
          —Firewall downloads and installs the new dynamic content update.
      3. (
        HA only
        ) Check (enable)
        Synchronize content with HA peer after download/install
         to also install the WildFire dynamic content update on the firewall HA peer.
    6. Save
      .

    Recommended For You

    © 2024 Palo Alto Networks, Inc. All rights reserved.