Best Practice Assessment
Best Practice Assessment (BPA) Tool — The BPA for next-generation firewalls and Panorama evaluates a device’s configuration by measuring the adoption of capabilities, validating whether the policies adhere to best practices, and providing recommendations and instructions for how to remediate failed best practice checks.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Best Practice Assessment

Best Practice Assessment (BPA) Tool — The BPA for next-generation firewalls and Panorama evaluates a device’s configuration by measuring the adoption of capabilities, validating whether the policies adhere to best practices, and providing recommendations and instructions for how to remediate failed best practice checks. This page will provide more information about this feature.

We are excited to announce BPA and Configuration Wizard capabilities are now available in AIOps for NGFW

Questions or Feedback?

Blogs

Select Relevant BPA Check

10-11-2022 — Select Relevant BPA Check At Palo Alto Networks, we understand that certain aspects of the Best Practice Assessment (BPA) report might not be relevant to customers without context of their use c...

Labels: Best Practice BPA
509 1 by in Best Practice Assessment Blogs

Best Practice Assessment New Executive Summary

09-29-2022 — Best Practice Assessment Executive Summary Best Practice Assessment (BPA) Executive Summary is a brief introduction of your network security posture and how it’s aligned with your business need...

Labels: Best Practice Assessment BPA
1438 4 by in Best Practice Assessment Blogs

Best Practice Assessment Executive Summary Risk Assessment

09-29-2022 — Best Practice Assessment Executive Summary Risk Assessment The cyber security incidents continue to increase and strengthen, big and small businesses are more vulnerable than ever to cybercri...

Labels: Best Practice Assessment BPA
910 by in Best Practice Assessment Blogs

Sample Documents

Sample Prisma Access Health Check BPA Report (html format)

06-07-2022 — An html file provides Prisma Access health summary along with security capability feature adoption. Addition of Prisma Access health check capability in BPA report is a great way to look at the sec...

Tags: BPA BPA Report html Prisma Access Health Checks
Labels: BPA
918 by in Best Practice Assessment Articles

BPA Report in HTML

07-15-2019 — A Sample BPA report as an HTML file can process your whole configuration to provide the security capability feature adoption across all devices and validate if you are aligning to security best pra...

Tags: BPA Report html panorama
Labels: BPA
5326 2 by in Best Practice Assessment Articles

Best Practice Checks spreadsheet - Panorama Example

07-10-2019 — Sample of a failed BPA spreadsheet that lists all the failed checks in the configuration and provides its relevant details to fix it. This can be used as a progress tracker by updating the status c...

Tags: best practice assessment BPA Failed BPA Checks panorama Panorama Example
Labels: BPA Panorama
4075 by in Best Practice Assessment Articles

API

BPA API Token Self Service Request Capability

11-02-2020 — BPA users (external customers, internal, and partners) are now able to request their BPA API Token request from the Customer Success site.

2490 1 by in Best Practice Assessment API

BPA API Zip Bundle

02-28-2020

In this article, find out how an API allows you to programmatically generate BPA data without the need to provide an entire TSF.

Tags: api BPA json Postman Collection
Labels: API BPA
3807 by in Best Practice Assessment API

Video Library

The Best Practice Assessment video library provides an in-depth look into each best practice check. You may choose from each of the categories below.

Frequently Asked Questions

Best Practice Assessment FAQ

06-30-2020

A compilation of frequently asked questions related to the Best Practice Assessment. This document will continue to grow as we encounter new questions from our customers.

Tags: BPA NGFW
9205 3 3 by in Best Practice Assessment Frequently Asked Questions

Release Notes

New Ransomware URL Filtering Category (BPA Version 7.3.0)

11-08-2022 — New Ransomware URL Filtering Category Starting September 27, 2022, Palo Alto Networks started to publish URLs into the newly introduced category “Ransomware” available with content release versi...

Labels: BPA URL Filtering
555 by in Best Practice Assessment Release Notes

BPA Release Notes (Version 6.4.0)

07-27-2022 — BPA Release Notes (Version 6.4.0) Starting BPA Version 6.0.0 Prisma Access BPA report will provide Health Check information about your Prisma Access. Health checks are essential in establishing...

Labels: BPA
685 by in Best Practice Assessment Release Notes

Discussions

Author Topic Views Replies
Pabitra_Parial
01-19-2023

VM - Series firewall Untrust nic subnet full ip used need to attache new subnet

hello everybody, Our firewall is a VM 500-Series model. All IP addresses in our firewall's Untrust nic subnet have already been used, so we must att...

posted in Best Practice Assessment Discussions

137 1
Kenneth716
01-16-2023

1G to 10G Internet FW - Palo Alto - 5220 Pair Stack - HA

Greetings, I wanted to reach out to the community regarding a best practice or some insight / advice moving to 10G SFP's in our environment on 5200 ...

posted in Best Practice Assessment Discussions

302 3
Shadow
01-04-2023

DHCP relay

Dear all, I am looking for a solution in applying DHCP relay on Palo Alto FW. problem Description there are many sub-interfaces and one DHCP server. i...

posted in Best Practice Assessment Discussions

397 2
vdahlman
12-29-2022

API-calls and PA-5220

Hello!First time posting here so please forgive me for any fouls.My question is if anyone has had any experience with how many API-calls a PA-5220 cou...

posted in Best Practice Assessment Discussions

360 1
JoHyeonJae
11-14-2022

Paloalto cannot resolve specific FQDN through Nslookup & "fqdn refresh" is not working on CLI console

Hello all,Our client company uses FQDN A and B that Nslookup the same IP, and the firewall has a DNS access policy applied with these FQDN. Recently...

posted in Best Practice Assessment Discussions

510 2