As new App-IDs are introduced and delivered to the firewall via weekly updates, dynamic filters are automatically updated for those applications that meet the filter criteria. This helps minimize administrative effort associated with security policy management.
https://www.paloaltonetworks.com/resources/techbriefs/app-id-tech-brief.html

https://docs.paloaltonetworks.com/wildfire/9-1/wildfire-admin/wildfire-deployment-best- practices/wildfire-best-practices If you are running PAN-OS 10.0 or later, configure your firewall to retrieve WildFire signatures in real-time. This provides access to newly-discovered malware signatures as soon as the WildFire public cloud can generate them, thereby preventing successful attacks by minimizing your exposure time to malicious activity.