BPA Release Notes v3.24

Printer Friendly Page

BPA Release Notes v3.24

 

 

New Features

 

Rule Hit Count 

We have added PAN-OS feature Rule Hit Count in to the BPA for firewalls running PAN-OS 9.0 and later. Now in the BPA results, we can filter those rules for adoption and best practices that are only passing traffic.

 

This greatly helps in focusing to increase adoption and best practices on the rules that are used. We want to apply different security capabilities on rules that are actively passing traffic, and (if possible) delete rules that are not being used to tighten the security rulebase.

 

Read "Rule Hit Count in Best Practice Assessment (BPA) Report" to learn more about this feature and how to use it.

 

Improvements

Display zone names in Zone Protection Profile

We have added the zone names in the Zone Protection Profile cards to indicate which zones are being impacted with a specific Zone Protection Profile (ZPP). This helps to identify which ZPPs are effectively configured and passing best practice checks. It also helps identify the zones it is protecting right in the same place.

 

ZPP 1 template stack BPA report.pngZPP-1 template stack BPA report with Applied On Zones highlighted.

 

DoS Protection Policies

We have added newer fields for DoS Protection rules, such as Rule Enabled, Action, Destination Address, Location, and Rule Name.

 

Dos Protection Rulebase BPA report.pngDoS Protection Rulebase BPA report with Dos Protection Rules highlighted.

 

Bugs

 

Correction in sensitive fields masking

Some field values, such as "any," were corrected while masking the values.

 

Cell color in Mapping Definition

Corrected the color from white to red for the best practices that were at 0% pass percentage.

 

Updated the action values for High-Risk IP Address field

Updated the different action field values to ensure the check considers all the options and works consistently to pass the BPA check.

 

Ask Questions Get Answers Join the Live Community
Version history
Revision #:
4 of 4
Last update:
‎01-06-2020 02:03 PM
Updated by:
 
Contributors