AIOps for NGFW Free (use the AIOps for NGFW Free app)
or
AIOps for NGFW Premium license (use the Strata Cloud Manager app)
You can now run the Best Practice Assessment (BPA) and Feature Adoption
summary directly from Strata Cloud Manager. Just upload a Tech Support File (TSF).
You can generate the on-demand BPA report for devices that are not sending telemetry
data or onboarded to AIOps for NGFW.
The BPA evaluates your security posture against Palo Alto Networks best practices and
prioritizes improvements for devices. Security best practices prevent known and unknown
threats, reduce the attack surface, and provide visibility into traffic, so you can know
and control which applications, users, and content are on your network. Additionally,
best practices include checks for the Center for Internet Security’s Critical Security
Controls (CSC). See the best practices guidance to bolster security
posture and implement improvements.
Can I Still Generate BPA Reports from the Customer Support Portal?
Transition to the new method of generating Best Practice Assessment
reports.
After July 17, 2023 you'll no longer be able to access and run the BPA from the
Customer Support Portal.
Go to the Hub and activate AIOps for NGFW. It’s free. You can
activate without Strata Logging Service if you don’t want to onboard devices with
telemetry enabled at this time.
The best practices dashboard, security alerts,
and adoption summary features are not available for devices onboarded
without Strata Logging Service or telemetry enabled.
Log in to your activated instance AIOps for NGFW. You’ll see the following
tabs, even without Strata Logging Service:
Posture
Activity
Settings
Go to DashboardsOn Demand BPA.
Select Generate New BPA Report to upload a valid TSF
from a device running PAN-OS version 9.1 or higher.
Select View Report below
Completed after the TSF is processed to view the
generated BPA report from your device.
