You can download a threat protection ruleset any time when you select to manually perform ruleset updates. You can choose to download rule updates but not immediately deploy them. NIOS archives and tracks up to nine ruleset versions, allowing for switching and merging between these versions when necessary. After uploading a ruleset, you can apply it by publishing it to the Grid and individual members. For more information, see Publishing Rule Updates Publishing Rule Updates.
Ruleset updates do not require restart of the DNS or threat protection service in the Grid, and they do not affect ongoing services. However, the appliance deploys updated rulesets only when you publish the changes. Note that all threat protection rule update events are logged in the syslog on the Grid Master only.
...
Note: By default, threat protection ruleset updates are automatic. Infoblox recommends that you retain this setting. For information about how to configure this setting, see Configuring Grid Security Properties.
...
To manually upload a ruleset file:
...