If your AIOps for NGFW app has been updated to give you the new Strata Cloud Manager management experience, visit these docs instead. Here's how to switch between
the two AIOps for NGFW guides based on the interface you're using:
You can now run the Best Practice Assessment (BPA) directly from AIOps for
NGFW . Just
upload a Tech Support File (TSF). You can generate the on-demand BPA report for devices
that are not sending telemetry data or onboarded to AIOps for NGFW.
The BPA evaluates your security posture against Palo Alto Networks best practices and
prioritizes improvements for devices. Security best practices prevent known and unknown
threats, reduce the attack surface, and provide visibility into traffic, so you can know
and control which applications, users, and content are on your network. Additionally,
best practices include checks for the Center for Internet Security’s Critical Security
Controls (CSC). See the best practices guidance to bolster security
posture and implement improvements.