Strata Cloud Manager
Dashboard: On Demand BPA
Table of Contents
Dashboard: On Demand BPA
Learn how to generate a BPA Report on demand.
| Where Can I Use This? | What Do I Need? |
|---|---|
|
→ The features and capabilities available to you in Strata Cloud Manager depend on which license(s) you are
using.
|
- Go to to get started.
What does this dashboard show you?
The dashboard shows the Best Practice Assessment (BPA) report based on the
uploaded TSF files of devices.
You can now run the Best Practice Assessment (BPA) and Feature
Adoption summary directly from Strata Cloud Manager. Just upload a TSF
file. You can generate the on-demand BPA report for devices that are not sending
telemetry data or onboarded to AIOps for NGFW.
How can you use the data from the dashboard?
The BPA evaluates your security posture against Palo Alto Networks best practices
and prioritizes improvements for devices. Security best practices prevent known
and unknown threats, reduce the attack surface, and provide visibility into
traffic, so you can know and control which applications, users, and content are
on your network. Additionally, best practices include checks for the Center for
Internet Security’s Critical Security Controls (CSC). See the best practices guidance to bolster
security posture and implement improvements.
Generate On-Demand BPA Report
- Go to .Generate New BPA Report.
![]()
Select TSF and Upload TSF file.![]()
The upload time is dependent on the size of your .tgz file and your Internet speed. Uploading the file could take a few minutes for larger files. Expand In-Progress to view the status of the TSF files.- On-demand BPA supports only the TSF files in the .tgz file format.
- On-demand BPA supports TSFs from devices with the PAN-OS version 9.1 or above for report generation.
- For information about Palo Alto Networks' data capturing, processing, and telemetry storage, see AIOps for NGFW Privacy in the Trust Center.
View Report below Completed to view the results.![]()
