PAN Migrations from SRX
Hi All,
Does anyone migrated SRX (1400) to PAN NGFW (3200) recently. If you have any best practices, please share it here.
This website uses Cookies. Click Accept to agree to our website's cookie use as described in our Cookie Policy. Click Preferences to customize your cookie settings.
Best Practice Assessment Discussions
The BPA for next-generation firewalls and Panorama evaluates a device’s configuration by measuring the adoption of capabilities, validating whether the policies adhere to best practices, and providing recommendations and instructions for how to remediate failed best practice checks.
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- Discussions
- Best Practice Assessment Discussions
Options
- Mark all as New
- Mark all as Read
- Float this item to the top
- Subscribe to RSS Feed
- Threaded format
- Linear Format
- Sort by Topic Start Date
Best Practice Assessment Discussions
The BPA for next-generation firewalls and Panorama evaluates a device’s configuration by measuring the adoption of capabilities, validating whether the policies adhere to best practices, and providing recommendations and instructions for how to remediate failed best practice checks.
Palo Alto Networks Approved
Community Expert Verified
About Best Practice Assessment Discussions
The BPA for next-generation firewalls and Panorama evaluates a device’s configuration by measuring the adoption of capabilities, validating whether the policies adhere to best practices, and providing recommendations and instructions for how to remediate failed best practice checks.
Discussions
Resolved! BPA's run yesterday and this morning are blank pages
I have been trying to run the same tech support file from a Panorama through the BPA tool but when I try to open the HTML page it is always blank. I tried opening it in several browsers and ran the same Pano with a slightly older tech support file a
...Connection of Palo-Alter HA A/P pair to pair of non stackable switch/router
Hello,
We faced a problem with reliable connection of Palo-Alto firewall HA A/P pair to not stackable pair of switches/routers (i.e. Cisco 6500, Huawei NE40E ) with static routing and FHRP.
To make this connection we used one VLAN-interface + 2 L2 inte
...BPA Report showing incorrect recommendations
Has anyone seen the BPA reports showing incorrect recommendations for things to change? Example being, "Log at Start of Session". The report is telling me that multiple rules should have that disabled, but none of my rules use Log at session start.
...Log Retention Policies and Best Practices
Hello.
I'm looking for suggestions for what to log out to ELK. I understand that this will be different for every environment and should be based on existing log retention policies etc. However, we have no such policies, and I am currently logging far
...New solutions
Latest Comments
-
OtakarKlier
on:
PAN-OS Upgrade
-
TomYoung
on:
BPA| Policies > Authentication Rules
-
TomYoung
on:
BGP Configuration with 2 diffrent ISP and /24 class
- Adrian_Jensen on: physical cabling for HA Active/Active
-
OtakarKlier
on:
Rectifying Vulnerabilities
-
Astardzhiev
on:
Syslog SSL Transport to SolarWinds Syslog Server
-
Astardzhiev
on:
VM - Series firewall Untrust nic subnet full ip used need to attache new subnet
- Metgatz on: 1G to 10G Internet FW - Palo Alto - 5220 Pair Stack - HA
- Shadow on: DHCP relay
-
OtakarKlier
on:
API-calls and PA-5220
Top Liked Posts
| Subject | Likes |
|---|---|
| 1 Like | |
| 1 Like | |
| 1 Like |
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks