Which update option is not available to administrators?

Palo Alto Networks firewalls receive several types of dynamic content updates to protect against the latest threats. These updates are delivered as distinct packages that administrators can schedule. Available update packages include "Applications and Threats" (which bundles new application signatures, spyware signatures, and vulnerability signatures), "Antivirus," and "PAN-DB URL Filtering."

Options A, C, D, and E describe content that is delivered within these standard update packages. However, "New URLs" is not a configurable update option. The firewall's URL filtering capability is updated by downloading versions of the PAN-DB database or by performing real-time lookups to the cloud service, not by receiving a simple list of new URLs as a discrete update type.

A. New Spyware Notifications: Anti-spyware signatures, which enable detection and notification, are a core component of the "Applications and Threats" content update.

C. New Application Signatures: App-ID signatures are the primary content delivered in the "Applications and Threats" update package.

D. New Malicious Domains: Signatures for malicious domains are delivered within the Anti-Spyware portion of the "Applications and Threats" update for features like DNS Security.

E. New Antivirus Signatures: These are delivered via the dedicated "Antivirus" content update package or as part of the "Applications and Threats" package.

---

1. Palo Alto Networks PAN-OS® Administrator’s Guide 10.2

"Manage New Content Updates

" Section: "Content Update Types." This section explicitly lists the available update types as Applications and Threats

Antivirus

GlobalProtect Data File

WildFire

and PAN-DB URL Filtering. It confirms that spyware

application

and antivirus signatures are part of these packages

while the URL filtering update is for the entire PAN-DB database

not an option called "New URLs."

2. Palo Alto Networks Beacon Digital Learning

"Palo Alto Networks Network Security Analyst (PNSA)

" Module: "The Security Operating Platform." This courseware describes the security subscriptions. It details that the Threat Prevention subscription provides antivirus and anti-spyware signatures (covering options A

D

E)

while the URL Filtering subscription provides access to the PAN-DB database. This reinforces the distinction between signature-based content and the URL database mechanism.

3. Palo Alto Networks TechDocs

"Content Delivery Network Infrastructure." This document explains how content is delivered. It describes the delivery of signature-based packages for threats and applications

and separately describes the mechanism for PAN-DB URL Filtering updates

which involves downloading a seed database and receiving updates

differentiating it from a simple list of "new URLs."