The recommended upgrade path ensures stability by moving sequentially through major releases:
from 9.1 to 10.0, then 11.0, and finally 11.2.

By default, Advanced WildFire signatures are updated within 5-10 minutes after new malware is analyzed and classified in the cloud.

A Data Filtering profile inspects outbound traffic and can block or control the transmission of sensitive information to internet applications.

Protecting against malicious and misconfigured domains requires two critical services:
Advanced Threat Prevention
Provides signature-based and advanced analysis to identify threats, including DNS-based attacks.
Advanced Threat Prevention enables the NGFW to detect and prevent exploits and malware- based communications, including those leveraging DNS.
Advanced DNS Security
Specifically designed to detect and sinkhole malicious and misconfigured DNS queries.
DNS Security uses real-time intelligence to block DNS-based threats, protect against data exfiltration, and automatically sinkhole suspicious domain lookups.
By combining these services in security policies, NGFWs ensure robust protection against domain- based threats and misconfigurations.