4.1 Ensure 'Antivirus Update Schedule' is set to download and install updates hourly

Information

Set Antivirus Update Schedule to download and install updates hourly.
Rationale:
New antivirus definitions may be released at any time. With an hourly update schedule, the firewall can ensure threats with new definitions are quickly mitigated. A daily update schedule could leave an organization vulnerable to a known virus for nearly 24 hours, in a worst-case scenario. Setting an appropriate threshold value reduces the risk of a bad definition file negatively affecting traffic.

Solution

Navigate to Device > Dynamic Updates > Antivirus Update Schedule.
Set Action to Download and Install.
Set Recurrence to Hourly.
Default Value:
Not Configured

See Also

https://workbench.cisecurity.org/files/2104

Item Details

Category: SYSTEM AND COMMUNICATIONS PROTECTION, SYSTEM AND INFORMATION INTEGRITY

References: 800-53|SC-7, 800-53|SI-2c., CSCv6|4.5, CSCv6|8.5, CSCv6|12, CSCv7|3.4, CSCv7|3.5, CSCv7|12

Plugin: Palo_Alto

Control ID: c310f769d2597fde429d1c3221180e056e28134d1f1a975264c36fb825aed1de