Best Practice Assessment

Best Practice Assessment

Best Practice Assessment (BPA) Tool — The BPA for next-generation firewalls and Panorama evaluates a device’s configuration by measuring the adoption of capabilities, validating whether the policies adhere to best practices, and providing recommendations and instructions for how to remediate failed best practice checks. This page will provide more information about this feature.

Best Practice Assessment Video Library

The Best Practice Assessment video library provides an in-depth look into each best practice check. You may choose from each of the categories below.

Best Practice Assessment API

BPA API Zip Bundle


In this article, find out how an API allows you to programmatically generate BPA data without the need to provide an entire TSF.

988 by in Best Practice Assessment API

BPA API Token Request


To request a BPA API from Palo Alto Networks, please provide the information outlined in this article. Read for more information.

963 1 by in Best Practice Assessment API

Have questions? Join the Live Community to post your questions and get answers.
Author Topic Views Replies

Moving one interface of PA cluster on new fabric

Hello Guys, I am in the middle of preparation for moving one interface of PA cluster to new fabric. I would like to ask you for best approach to minimize...

58 0

BPA's run yesterday and this morning are blank pages

I have been trying to run the same tech support file from a Panorama through the BPA tool but when I try to open the HTML page it is always blank. I tried...

104 2
3 weeks ago

Connection of Palo-Alter HA A/P pair to pair of non stackable switch/router

Hello,We faced a problem with reliable connection of Palo-Alto firewall HA A/P pair to not stackable pair of switches/routers (i.e. Cisco 6500, Huawei...

551 5

BPA Report showing incorrect recommendations

Has anyone seen the BPA reports showing incorrect recommendations for things to change? Example being, "Log at Start of Session". The report is telling...

844 4

ESM on-premise Traps preventive maintenance report

Could anyone share a sample preventive maintenance report for Traps (ESM premise). Thank you in advance.

661 0

Best Practice Assessment Blogs

Rule Hit Count in BPA Report


Read about the new features in the Best Practice Assessment (BPA) Report to process Rule Hit Count.

1463 2 by in Best Practice Assessment Blogs

BPA Report: Methodology and Training Links for Security Posture


Read about how a BPA report provides methodology and training links to help you improve your security posture.

1899 1 by in Best Practice Assessment Blogs

BPA Adventure: Anti-Spyware and DNS Sinkhole


Like any good security engineer, I have my own PA-220 at home and I was (smugly) wondering how well I would score on a Best Practice Assessment (BPA). The results were...interesting.

1978 7 by in Best Practice Assessment Blogs

Best Practice Assessment Release Notes

BPA Release Notes v3.16

a week ago — Adoption capability with License details New feature Details: When a license is expired or inactive its respective features do not work at their best. For instance if URL filtering license is expired then...

1023 by in Best Practice Assessment Release Notes

BPA Release Notes v3.17

a week ago — v3.17.0 - Released on 8/13/2019 New Features Log Forwarding URL Settings Details: When you create Log Forwarding profiles, forward URL logs to Panorama or another logging system, such as a syslog, SNMP,...

1058 by in Best Practice Assessment Release Notes

Best Practice Assessment Sample Documents

Best Practice Assessment FAQ


A compilation of frequently asked questions related to the Best Practice Assessment. This document will continue to grow as we encounter new questions from our customers.

612 by in Best Practice Assessment Articles

BPA Report in HTML

07-15-2019 — A Sample BPA report as an HTML file can process your whole configuration to provide the security capability feature adoption across all devices and validate if you are aligning to security best practices....

2335 1 by in Best Practice Assessment Articles

Best Practice Checks spreadsheet - Panorama Example

07-10-2019 — Sample of a failed BPA spreadsheet that lists all the failed checks in the configuration and provides its relevant details to fix it. This can be used as a progress tracker by updating the status column....

1669 by in Best Practice Assessment Articles