https://live.paloaltonetworks.com/t5/general-topics/bpa-recomendations-on-unconfigurable-pre-defined-profiles/m-p/248795#M70767 <P>Hello,</P><P>Best way to do what you are looking for is to clone the predefined policies and then you can modify them. The predefined ones cannot be modified.</P><P>&nbsp;</P><P>Hope that helps.</P> Mon, 04 Feb 2019 19:23:33 GMT OtakarKlier 2019-02-04T19:23:33Z https://live.paloaltonetworks.com/t5/general-topics/bpa-recomendations-on-unconfigurable-pre-defined-profiles/m-p/248690#M70740 <P>BPA recomends making changes ( Sinkhole, Packet capture) on a number of our Security profiles.&nbsp;</P><P>&nbsp;</P><P>For example adding packet capture and sinkhole DNS. But one of the rules it recomends this on is the pre-defined "strict" Anti Spyware Policy. And other changes to the default Anti Virus policy... Neither of these can be modified so will fail to meet the BPA recomendation and always flag as an issue??&nbsp;</P><P>&nbsp;</P><P>Anyone else come across this?</P><P>&nbsp;</P><P>Rob</P> Mon, 04 Feb 2019 12:11:24 GMT https://live.paloaltonetworks.com/t5/general-topics/bpa-recomendations-on-unconfigurable-pre-defined-profiles/m-p/248690#M70740 RobinClayton 2019-02-04T12:11:24Z https://live.paloaltonetworks.com/t5/general-topics/bpa-recomendations-on-unconfigurable-pre-defined-profiles/m-p/248795#M70767 <P>Hello,</P><P>Best way to do what you are looking for is to clone the predefined policies and then you can modify them. The predefined ones cannot be modified.</P><P>&nbsp;</P><P>Hope that helps.</P> Mon, 04 Feb 2019 19:23:33 GMT https://live.paloaltonetworks.com/t5/general-topics/bpa-recomendations-on-unconfigurable-pre-defined-profiles/m-p/248795#M70767 OtakarKlier 2019-02-04T19:23:33Z