Inconsistent BPA Results

Reply
L1 Bithead

Inconsistent BPA Results

I am getting unexpected results with Best Practice Analysis. For instance, Going to Best PracticeSecurity Policies shows red X for all tags and many descriptions, but the majority of my policies have both.  

Also, the adoption diagram shows 0% for High Availability, but I have HA configured to nearly all best practice specifications. Dynamic Updates is similar, shows 60% but I have it configured to complete best practice specs.

 

Just wondering if this is user error, a bug, or if BPA is not 100% production ready yet.

L7 Applicator

Re: Inconsistent BPA Results

Hi,

 

We upgraded the BPA to the latest version 3.6.1 in our Expedition 1.0.107, can you update and try with that to see if still doesnt make sense the output? Thx

L1 Bithead

Re: Inconsistent BPA Results

Just updated to 1.0.107, getting the same results.

L7 Applicator

Re: Inconsistent BPA Results

Have you run the BPA after the update and you get same results? What are the ones you think are incorrect? Thx

L1 Bithead

Re: Inconsistent BPA Results

I have; I also created a new project, imported, and ran BPA with same results. The items listed in my original post are incorrect.

Additionally, as a test I implemented allowed IP addresses on my management interface, but the check still fails as though it is not implemented.

L7 Applicator

Re: Inconsistent BPA Results

Im adding Customer success to check since the BPA is something we cannot change by our own :-) I will update here with the findings

L1 Bithead

Re: Inconsistent BPA Results

Thank you, I appreciate your assistance.

L2 Linker

Re: Inconsistent BPA Results

Hi magates, can you please send an email to customersuccesstools@paloaltonetworks.com so we can help troubleshoot your issue?

L3 Networker

Re: Inconsistent BPA Results

Have the same issue here. Running latest version 1.0.107 with BPA 3.6.1. All policies have tags red x-ed while only four out of 73 policies has no tag.

Tags (1)
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!