PaloALto automatique update for threat prevention

[hamza-zidane]

Hello

I need some help in an automatic update for the Threat Prevention.

let me explain to you our design.

We have the headquarter, and the branches, in one of this branches there is PaloAlto firewall, and this PaloAlto is not connected to the internet directly, there is a proxy internet in headquarter, then how I can configure my PaloAlto to see internet and get the vulnerablity update via this proxy installed in the headquarter ??

Thanks

[reaper · Accepted solution]

you can configure a proxy server on the management services and have all outbound update connections rerouted to your proxy server :

[hamza-zidane]

Thank you very much brother, tell me plz and for DNS server i let the google @IP  8.8.8.8 & 4.2.2.2 or I'll change it to proxy address also ??

[reaper]

The proxy setting does all you need: once you fill out the proxy config, all outbound connections will be forwarded to the proxy, so unless you proxy also doubles as a DNS proxy (requires you to set is as a client dns rather than passthrough), simply leave your DNS settings as you have them now and they will be forwarded

[hamza-zidane]

Thanks you very much brother