List and feed updates for security intelligence feeds
A list and feed update is a security intelligence mechanism that performs the following functions:
-
Replaces the existing list or feed file with the contents of the new file.
-
Does not merge contents of existing and new files.
-
If a corrupt or unrecognizable feed is downloaded, the system keeps using previous feed data. This is not true for the first download. If the system recognizes at least one entry in the feed, it uses only the entries it can recognize.
Feed update frequency and device polling
-
Each feed updates the Cloud-Delivered Firewall Management Center every two hours by default; you can modify this frequency.
-
When the Cloud-Delivered Firewall Management Center receives updates, it immediately passes them to your managed devices.
-
Your managed devices poll the Cloud-Delivered Firewall Management Center every 30 minutes for changes. You cannot change this polling frequency.
-
For Secure Firewall 200, updates are downloaded once a day, not every 30 minutes.
To modify feed update intervals, see Change the update frequency for security intelligence feeds.