topic Feature Adoption -> Best Practices -> URL Filtering Profiles - recent changes? in AIOps for NGFW Discussions

Feature Adoption -> Best Practices -> URL Filtering Profiles - recent changes?

JorgeMBVicetto — Fri, 18 Oct 2024 12:23:22 GMT

Does anyone know if PaloAlto Networks made any recent changes to the way AIOPs evaluates if the URL Filtering Profiles are following best practices for the Feature Adoption screen?

Our firewalls from October 9th to 11th, saw the score go from 97% to 0% and I can't see any relevant changes in the firewalls.

I've been doing diffs between the xml config files and looking at config audit between versions prior and after the score drop, without success.

Thank you

Re: Feature Adoption -> Best Practices -> URL Filtering Profiles - recent changes?

kaymorrison — Mon, 21 Oct 2024 19:25:12 GMT

Here is where you can see Palo's best practice recommendations. If the URL filtering profile does not have all of those categories blocked, it will fail the best practice checks.

https://docs.paloaltonetworks.com/best-practices/internet-gateway-best-practices/best-practice-internet-gateway-security-policy/create-best-practice-security-profiles

As for why all of a sudden it changed, AIOps is not perfect and I have seen my firewall scores change without a rhyme or reason. AIOps/Strata Cloud Manager is still very new and a work in progress. Palo seems to be changing things quite frequently.

Hope this helps!

Re: Feature Adoption -> Best Practices -> URL Filtering Profiles - recent changes?

JorgeMBVicetto — Mon, 28 Oct 2024 18:57:50 GMT

Thank you for the link.

I had already "stumbled" on that page and had reviewed the security profiles to follow the recommendations.

In any case, I'm going to review again the configuration of the security profiles.

Re: Feature Adoption -> Best Practices -> URL Filtering Profiles - recent changes?

JorgeMBVicetto — Fri, 06 Dec 2024 16:30:55 GMT

In the meantime, PaloAlto must have made some changes, as the score went up again.

So this is "solved" for us.