The dashboard shows the Best Practice Assessment (BPA) report based on the
uploaded TSF files of devices.
You can now run the Best Practice Assessment (BPA) and Feature
Adoption summary directly from
Strata Cloud Manager
. Just upload a Tech
Support File (TSF). You can generate the on-demand BPA report for devices that
are not sending telemetry data or onboarded to AIOps for NGFW.
How can you use the data from the dashboard?
The BPA evaluates your security posture against Palo Alto Networks best practices
and prioritizes improvements for devices. Security best practices prevent known
and unknown threats, reduce the attack surface, and provide visibility into
traffic, so you can know and control which applications, users, and content are
on your network. Additionally, best practices include checks for the Center for
Internet Security’s Critical Security Controls (CSC). See the best practices guidance to bolster
security posture and implement improvements.
Generate On-Demand BPA Report
Follow these steps to generate the BPA Report on
demand.
Navigate
to
Dashboards > On-Demand BPA
.
Generate New BPA Report
.
Select TSF
and
Upload TSF
file.
The upload time is dependent on the size of your .tgz file and your
Internet speed. Uploading the file could take a few minutes for larger
files. Expand
In-Progress
to view the status of
the TSF files.
On-demand BPA supports only the Tech Support Files (TSF) in
the .tgz file format.
On-demand BPA supports TSFs from devices with the PAN-OS
version 9.1 or above for report generation.
For information about Palo Alto Networks' data capturing,
processing, and telemetry storage, see AIOps for NGFW
Privacy in the Trust Center.