- Access exclusive content
- Connect with peers
- Share your expertise
- Find support resources
Enhanced Security Measures in Place: To ensure a safer experience, we’ve implemented additional, temporary security measures for all users.
11-11-2022 01:46 PM
Team,
Can anyone please explain to me what the Threashold section does under Application and Threat updates?
I am so confused!
11-11-2022 02:05 PM
Hello,
Its how old the package needs to be before its installed. Lets say its like the picture and set to 48 hours. While the PAN checks every 30 minutes, the package must be at least 48 hours old to be installed. This is to help minimize any accidental production goofs on the Palo alto side. I have mine set to check once a day, but the package must be at least 12 hours old.
Hope that makes sense.
11-11-2022 02:49 PM
Hello @Schneur_Feldman
Hello, good afternoon.
The Threshold corresponds to the additional time. Example you have set every 30, but if you have 48 hrs, after 30 minutes, it will wait the hours you entered in Threshold in your case, example 48, to just perform the action you indicated, as in this case, download and install.
Best regards
11-13-2022 04:24 PM
Hello @Schneur_Feldman , it all depends on how you adjust it.
Some people prefer, once a new release comes out, well a new Update Dynamic, to wait before installing, to review and analyze, relying on the threshold set. There are those who prefer to just download and install every 30 minutes and not leave anything in the threshold. It all depends on your environments and scenarios.
Check these links related to Best Practices, but the choice should always be based on your choice, priority and environment:
-https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/software-and-content-updates/best-practices-for-app-and-threat-content-updates
Best regards
11-11-2022 02:05 PM
Hello,
Its how old the package needs to be before its installed. Lets say its like the picture and set to 48 hours. While the PAN checks every 30 minutes, the package must be at least 48 hours old to be installed. This is to help minimize any accidental production goofs on the Palo alto side. I have mine set to check once a day, but the package must be at least 12 hours old.
Hope that makes sense.
11-11-2022 02:49 PM
Hello @Schneur_Feldman
Hello, good afternoon.
The Threshold corresponds to the additional time. Example you have set every 30, but if you have 48 hrs, after 30 minutes, it will wait the hours you entered in Threshold in your case, example 48, to just perform the action you indicated, as in this case, download and install.
Best regards
11-13-2022 10:59 AM
Thanks! So I guess the million dollar question is the Palo checking App and Threats every 30 minutes but just installing them after 48 hours?
I guess what I am confused about here is if there is any point in having the PA check every 30 minutes if its only installing after 48 hours??
Still kind of confused. Would anyone be able to explain the flow of a new package update and how that thresh hold effects it?
11-13-2022 04:24 PM
Hello @Schneur_Feldman , it all depends on how you adjust it.
Some people prefer, once a new release comes out, well a new Update Dynamic, to wait before installing, to review and analyze, relying on the threshold set. There are those who prefer to just download and install every 30 minutes and not leave anything in the threshold. It all depends on your environments and scenarios.
Check these links related to Best Practices, but the choice should always be based on your choice, priority and environment:
-https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/software-and-content-updates/best-practices-for-app-and-threat-content-updates
Best regards
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!