BPA CIS/CSC Report missing, where do I find it in AIOps?

[NilsGab]

I have use for this, my auditor ask for this every time.

[TomYoung]

Hi @NilsGab ,

In AIOps, go to the Best Practices tab.  If it is not there, add it with More Dashboards.  On the BP tab, select your NGFW in the upper left, and click on the download button in the upper right.

The report is not exactly the same, but it does have numbers for CSC checks.

Thanks,

Tom

[NilsGab]

Thank you, but it does not give me any CIS # stuff, and on some of the "failed checks" it do not give me info about what to fix

e.g. this one, what URL categories is should I block?

[TomYoung]

Hi @NilsGab ,

Did you download the report, as I said?  Please download the report and take a look at those files.  The download also includes a CSV file with items to fix.  The download is a new feature that was recently shown to me.  It is better than the dashboard.  Your GUI screen shot is from the dashboard.

Thanks,

Tom

[NilsGab]

Yes, downloaded it, nothing about CIS in it.

[TomYoung]

Hi @NilsGab ,

Every section of the PDF has the following counters:

• Failed CSC checks
• Failed non-CSC checks
• Failed CSC and non-CSC checks

So, there is some info.  I understand the format is not the same as the previous report which is shown in your screen shot.

This is a community forum, and I don't work for PANW.  You asked if you could get CSC info from AIOps BPA, and there it is.

Thanks,

Tom

[NilsGab]

I don't find anything about CSC 3, CSC4, CSC6 and so on.
I have several customer complains about the report, not sure what I can tell them.
 

[MMadrala]

Hi,

I was told by Palo that the old BPA report has been discontinued. I'm afraid you need to find what you need within AIOps.

[pzablotski]

Update to this thread - CSC and NIST mappings are under the Compliance dashboard.. e.g.