topic Re: Inconsistent BPA Results in Expedition Discussions

Inconsistent BPA Results

magates — Tue, 16 Oct 2018 20:28:31 GMT

I am getting unexpected results with Best Practice Analysis. For instance, Going to Best Practice > Security Policies shows red X for all tags and many descriptions, but the majority of my policies have both.

Also, the adoption diagram shows 0% for High Availability, but I have HA configured to nearly all best practice specifications. Dynamic Updates is similar, shows 60% but I have it configured to complete best practice specs.

Just wondering if this is user error, a bug, or if BPA is not 100% production ready yet.

Re: Inconsistent BPA Results

alestevez — Fri, 19 Oct 2018 13:51:59 GMT

Hi,

We upgraded the BPA to the latest version 3.6.1 in our Expedition 1.0.107, can you update and try with that to see if still doesnt make sense the output? Thx

Re: Inconsistent BPA Results

magates — Fri, 19 Oct 2018 14:46:24 GMT

Just updated to 1.0.107, getting the same results.

Re: Inconsistent BPA Results

alestevez — Fri, 19 Oct 2018 14:47:57 GMT

Have you run the BPA after the update and you get same results? What are the ones you think are incorrect? Thx

Re: Inconsistent BPA Results

magates — Fri, 19 Oct 2018 14:54:53 GMT

I have; I also created a new project, imported, and ran BPA with same results. The items listed in my original post are incorrect.

Additionally, as a test I implemented allowed IP addresses on my management interface, but the check still fails as though it is not implemented.

Re: Inconsistent BPA Results

alestevez — Fri, 19 Oct 2018 14:59:20 GMT

Im adding Customer success to check since the BPA is something we cannot change by our own 🙂 I will update here with the findings

Re: Inconsistent BPA Results

magates — Fri, 19 Oct 2018 15:01:31 GMT

Thank you, I appreciate your assistance.

Re: Inconsistent BPA Results

anmendoza — Wed, 24 Oct 2018 15:45:03 GMT

Hi magates, can you please send an email to customersuccesstools@paloaltonetworks.com so we can help troubleshoot your issue?

Re: Inconsistent BPA Results

KlausGroeger — Sun, 28 Oct 2018 11:32:01 GMT

Have the same issue here. Running latest version 1.0.107 with BPA 3.6.1. All policies have tags red x-ed while only four out of 73 policies has no tag.