That's still the appropriate url for updates, it will automatically resolve the cloud instance nearest to you. You can use static updates.paloaltonetworks.com to troubleshoot connectivity if you suspect there might be connectivity issues with the local cloud (don't set that as permanent update server)
So Just to confirm, both software and dynamic updates, as well as licenses retrieving are all pointing to updates.paloaltonetworks.com?
That's still the appropriate url for updates, it will automatically resolve the cloud instance nearest to you. You can use static updates.paloaltonetworks.com to troubleshoot connectivity if you suspect there might be connectivity issues with the local cloud (don't set that as permanent update server)