This BPA check provides a guidance on how old is the PAN-OS minor version that is installed on the device. Software bug fixes and security advisory vulnerability updates are provided as minor version updates, and it is advisable to be in the recent minor version of the major version to benefit from the security and feature functioning fixes.
BPA check 242 is now tracked to ensure this is enabled. This feature will start tracking each security policy if it is actively processing traffic. This helps identify policies that are not used for traffic processing for a long time and take necessary clean up or rule optimization process.
Updated BPA check 242 to be a type Note because GlobalProtect Portal authentication can have external type of authentication that may not be visible from the configuration on firewall alone.