Enhanced Security Measures in Place: To ensure a safer experience, we’ve implemented additional, temporary security measures for all users.
BPA Release Notes
(Version 6.3.0)
Starting BPA Version 6.0.0 Prisma Access BPA report will provide Health Check information about your Prisma Access. Health checks are essential in establishing a solid foundation upon which cybersecurity infrastructure is built, it will help to identify weakest security areas, and will also recommend the best practice actions to mitigate any potential risks.
The Service Health option under Best Practice Assessment tab will provide you with the detailed information about each health check and the necessary actions that are required to pass each one of them.
Figure 1: Service Health under Best Practice Assessment
To learn more about health checks in Prisma Access BPA report please click here
Health Checks added to BPA in BPA V6.3.0
| Category | Health Checks |
| Security |
Mobile Users Policy Security Policy zones untrust Remote Network Policy Security Policy zones untrust Mobile Users Security Policy UserID Mobile Users Policy Security Policy Sensitive Traffic Remote Network Policy Security Policy Sensitive Traffic |
|
Infrastructure |
Mobile User Deployment Service Connection Presence Mobile Users Gateway Regions Mobile User Deployment IP Pool Allocation Mobile Users Onboarding Prisma Access Subnet Service Connection Onboarding Prisma Access Service Subnet |
|---|---|
| Connectivity | QoS Remote Network |
Review the latest Known Issues
|
Severity |
Description |
|
S2 |
HTML Report > Deployment Type missing from Mapping Definitions. Deployment Type showing as undefined, whereas it should actually show the correct mapping definitions. |
|
S2 - Major |
Action on DNS Queries for DNS Sinkhole is not set to “sinkhole” and still passes |
|
S3 - Minor |
Reloading the HTML Report will repeatedly show New Features pop up |
|
S3-Minor |
Authentication tab text not matching main screen text |
|
S3 - Minor |
SNMP tab text not matching main screen text |
|
S3-Minor |
Device management license should have the same SN as host SN |
|
S3 - Minor |
Target Device is being set as none instead of the serial number of the device |
|
S3 - Minor |
The local filters are capitalization sensitive when typing in a search query. The filter should be able to take in both capitalized words and non capitalized words. |
Review the Addressed Issues from the last release
|
Severity |
Description |
|
S2 |
Error After Uploading TSF to CSS |
|
S3-Minor |
Batch license info showing empty |
|
S1 |
Error while running BPA Report for Prisma Access. Authentication Cookie timeout is not set for customer |
|
S2 |
Report generation is failing for strata |
|
S3 |
Global Protect Checks fails |
For BPA support, please contact us at bpa@paloaltonetworks.com
Resources
How to generate a Prisma Access BPA Report
Best Practice Assessment (BPA) Tool LIVEcommunity Page
Configuration Wizard Demos
