- Access exclusive content
- Connect with peers
- Share your expertise
- Find support resources
on 03-11-2020 11:29 AM - edited on 04-03-2020 03:37 PM by Retired Member
This BPA check provides a guidance on how old is the PAN-OS minor version that is installed on the device. Software bug fixes and security advisory vulnerability updates are provided as minor version updates, and it is advisable to be in the recent minor version of the major version to benefit from the security and feature functioning fixes.
BPA check 242 is now tracked to ensure this is enabled. This feature will start tracking each security policy if it is actively processing traffic. This helps identify policies that are not used for traffic processing for a long time and take necessary clean up or rule optimization process.
Updated BPA check 242 to be a type Note because GlobalProtect Portal authentication can have external type of authentication that may not be visible from the configuration on firewall alone.