Feature Adoption -> Best Practices -> URL Filtering Profiles - recent changes?

[JorgeMBVicetto]

Does anyone know if PaloAlto Networks made any recent changes to the way AIOPs evaluates if the URL Filtering Profiles are following best practices for the Feature Adoption screen?

Our firewalls from October 9th to 11th, saw the score go from 97% to 0% and I can't see any relevant changes in the firewalls.

I've been doing diffs between the xml config files and looking at config audit between versions prior and after the score drop, without success.

Thank you

[kaymorrison]

Here is where you can see Palo's best practice recommendations. If the URL filtering profile does not have all of those categories blocked, it will fail the best practice checks.

https://docs.paloaltonetworks.com/best-practices/internet-gateway-best-practices/best-practice-inter...

As for why all of a sudden it changed, AIOps is not perfect and I have seen my firewall scores change without a rhyme or reason. AIOps/Strata Cloud Manager is still very new and a work in progress. Palo seems to be changing things quite frequently.

Hope this helps!

[JorgeMBVicetto]

Thank you for the link.

I had already "stumbled" on that page and had reviewed the security profiles to follow the recommendations.

In any case, I'm going to review again the configuration of the security profiles.

[JorgeMBVicetto]

In the meantime, PaloAlto must have made some changes, as the score went up again.

So this is "solved" for us.