Dashboard: On Demand BPA
Strata Cloud Manager

Dashboard: On Demand BPA

Table of Contents

Dashboard: On Demand BPA

Learn how to generate a BPA Report on demand.
Where Can I Use This?
What Do I Need?
  • NGFW (Managed by PAN-OS or Panorama)
  • NGFW (Managed by Strata Cloud Manager)
  • VM-Series, funded with Software NGFW Credits
  • AIOps for NGFW Free (use the AIOps for NGFW Free app)
    AIOps for NGFW Premium license (use the Strata Cloud Manager app)
  • Go to
    On Demand BPA
    to get started.

What does this dashboard show you?

The dashboard shows the Best Practice Assessment (BPA) report based on the uploaded TSF files of devices.
You can now run the Best Practice Assessment (BPA) and Feature Adoption summary directly from
Strata Cloud Manager
. Just upload a Tech Support File (TSF). You can generate the on-demand BPA report for devices that are not sending telemetry data or onboarded to AIOps for NGFW.

How can you use the data from the dashboard?

The BPA evaluates your security posture against Palo Alto Networks best practices and prioritizes improvements for devices. Security best practices prevent known and unknown threats, reduce the attack surface, and provide visibility into traffic, so you can know and control which applications, users, and content are on your network. Additionally, best practices include checks for the Center for Internet Security’s Critical Security Controls (CSC). See the best practices guidance to bolster security posture and implement improvements.

Generate On-Demand BPA Report

Follow these steps to generate the BPA Report on demand.
  1. Go to
    On Demand BPA
  2. Generate New BPA Report
  3. Select TSF
    Upload TSF
    The upload time is dependent on the size of your .tgz file and your Internet speed. Uploading the file could take a few minutes for larger files. Expand
    to view the status of the TSF files.
    • On-demand BPA supports only the Tech Support Files (TSF) in the .tgz file format.
    • On-demand BPA supports TSFs from devices with the PAN-OS version 9.1 or above for report generation.
    • For information about Palo Alto Networks' data capturing, processing, and telemetry storage, see AIOps for NGFW Privacy in the Trust Center.
  4. View Report
    to view the results.

Recommended For You