Details: When a license is expired or inactive its respective features do not work at their best. For instance if URL filtering license is expired then URL filtering capability, Credential Phishing protection capability gets outdated and may not provide effective security coverage. With this addition now we can see a notification if license is expired so that we can identify if the adoption is effective or not.
Details: When the DNS security license is active we ensure the DNS security service is configured according to best practice. In the DNS Signature tab in Anti-spyware profile we can select the DNS securit service EDL and set to action = sinnkhole and single packet capture to pass the best practice.
Details: When using certain features that need license to be active and if license gets expired this new check will indicate the necessity of license to run the feature at optimal and as expected.
Ex: If Anti-spyware is enabled on firewall policies but the license is not active or expired then the check would provide an indication to enable the license to ensure the feature works as intended.
Details: Updated the BPA Mapping definition table under BPA component with new checks and its respective columns pertaining to security controls such a Capability Summary, CIS Critical Security controls.
Details: Wildfire file size values for types Pdf and Msoffice was not accurate and had been rounded. These values were updated as per the recommendation.