Threat Prevention Scheduled Updates

Updating Threat Emulation

Threat Emulation connects to the ThreatCloud to update the engine and the operating system images. The default setting for the Threat Emulation appliance is to automatically update the engine and images.

The default setting is to download the package once a day.

Best Practice - Configure Threat Emulation to download the package when there is low network activity.

Update packages for the Threat Emulation operating system images are usually more than 2GB. The actual size of the update package is related to your configuration.

To enable or disable Automatic Updates for Threat Emulation:

1. In SmartConsole, select Security Policies > Threat Prevention.
2. From the Threat Tools section, click Updates.

   The Updates page opens.

3. Under Threat Emulation, click Schedule Update.
4. Select or clear these settings:
   • Enable Threat Emulation engine scheduled update
   • Enable Threat Emulation images scheduled update
5. Click Configure to configure the schedule for Threat Emulation engine or image updates.
6. Configure the automatic update settings to update the database:
   • To update once a day, select At and enter the time of day
   • To update multiple times a day, select Every and set the time interval
   • To update once or more for each week or month:
   1. Select At and enter the time of day.
   2. Click Days.
   3. Click Days of week or Days of month.
   4. Select the applicable days.
7. Click OK and then install the Threat Prevention policy.

To Learn More About Threat Prevention

To learn more about configuring a Threat Prevention Policy, see the R80.20 Threat Prevention Administration Guide.