Best practices for Dynamic updates

[Schneur_Feldman]

Hi,

Does anyone know what the Best Practices are for dynamic updates?

[PavelK]

Hello @Schneur_Feldman

I would recommend to take a look at this KB and links that are referred inside KB: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClaECAS

Kind Regards

Pavel

[TomYoung]

Hi @Schneur_Feldman ,

That is a great question.  PANW has many documents with regards to best practices for dynamic updates, one of which is mentioned by @PavelK.  I have seen the update intervals change over the years, getting smaller as PANW increases their frequency of providing updates.

For my NGFWs, I always load the Day 1 Configuration 1st.  It includes the current best practice update schedule for each update.  https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000PM2lCAG  It also includes many other best practices.  Afterwards, in order to keep up with best practice changes, I run a BPA on Panorama or a selected NGFW.  https://docs.paloaltonetworks.com/best-practices/9-1/best-practices-getting-started/get-started-with...

This is the best way I have found to stay updated to best practice recommendations.

Thanks,

Tom

Edit:  If you want to learn more about best practices in general, go here -> https://docs.paloaltonetworks.com/best-practices.