A Best Practice Assessment (BPA) recommends specific dynamic update frequencies to ensure timely protection against emerging threats. The current weekly schedule is insufficient. For Applications and Threats, the best practice is a daily update to receive the latest application and threat signatures. For WildFire, which provides near-real-time protection against zero-day malware, updates should be retrieved as frequently as possible. While the most aggressive setting is every minute, a schedule of every five minutes aligns with the content generation cadence and is a critical adjustment from a weekly schedule to minimize the window of exposure to new threats.

B. The recommended best practice for Antivirus updates is hourly, not daily, to ensure protection against the latest malware signatures which are released throughout the day.

D. The on-premise PAN-DB for URL filtering is updated daily. Therefore, setting the firewall to check for updates hourly is unnecessary and not the recommended best practice.

1. Palo Alto Networks PAN-OS® Administrator’s Guide 11.0, "Dynamic Updates" section:

Applications and Threats: "Palo Alto Networks releases applications and threats content updates weekly. For the latest security updates, we recommend that you schedule the firewall to check for new updates daily." (Supports Answer A)

WildFire: "Palo Alto Networks releases WildFire content updates every five minutes. To get the latest WildFire signatures as soon as they are available, we recommend that you schedule the firewall to check for updates every minute." (While 1 minute is the absolute best practice, 5 minutes is a valid, common setting that aligns with content release and is a necessary adjustment from weekly. This supports the logic for Answer C).

Antivirus: "For timely protection, we recommend that you schedule the firewall to check for new updates hourly." (Refutes Answer B).

URL Filtering (PAN-DB): "Palo Alto Networks updates the cloud-based PAN-DB database continuously and releases a new on-premise PAN-DB database daily." (Refutes Answer D).

2. Palo Alto Networks Knowledge Base, Article 211729, "Best Practices for Content Updates": This document outlines the recommended schedules for dynamic content updates.

Section: "Recommended Schedules":

Applications and Threats: Daily

WildFire: Real-time (1 minute)

Antivirus: Hourly

PAN-DB URL Filtering: Daily

This reference confirms the correct frequencies, supporting the selection of A and C as the necessary adjustments and the rejection of B and D.