Configuration Wizard Release Notes Version 1.3.0

[vsharma1]

Configuration Wizard

Release Notes

Version 1.3.0

• About Configuration Wizard
• Configuration Wizard Highlights
• Configuration Wizard Customer Benefits
• Additional Best Practices Check added to Configuration Wizard
• Existing Best Practices Checks Supported by Configuration Wizard
• Review the latest Known Issues
• Review the Known Issues from the last release
• Getting Help
• Related Documentation
• Requesting Support

About Configuration Wizard

The Palo Alto NetworksⓇ Configuration Wizard guides customers step-by-step by providing an intuitive, easy-to-use interface to configure firewalls that aligns with best practices. Configuration Wizard provides customized recommendations to remediate BPA-found issues and improve overall feature adoption and improve security posture.

Customers now get clear insights or direction on how to take action on failed BPA checks and improve security posture after running a BPA report.

Configuration Wizard Highlights

• Integrates with BPA tool to quickly deploy remediation from failed best practices on NGFW or Panorama™ capabilities
• Identifies top 20 most important BPA checks for remediations to confirm the best practice settings being modified.
• Provide step-by-step configuration guide using the Configuration Wizard to quickly configure PAN-OS features
• The BPA+ Configuration Wizard provides a list of Set Commands for quick and easy configuration changes

Configuration Wizard Customer Benefits

• Save time and automatically remediate to security best practices. 
• Lower risk and reduce configuration errors 
• Quickly deploy across you entire network security infrastructure
• Maximize your return on your security investment

Additional Best Practices Check added to Configuration Wizard

Category	BPA Checks
Device	Script File Size Limit

 

Existing Best Practices Checks Supported by Configuration Wizard

Category	BPA Checks
Policies	Interzone Deny Rule with Logging Intrazone Allow Rules with Logging Malicious IP address Feed (Inbound) Malicious IP Address Feed (Outbound) High Risk IP Address (Inbound) High Risk IP Address (Outbound)
Objects	Antivirus Profile Decoder Actions DNS Sinkhole Antivirus Profile Decoder Wildfire Actions URL Filtering Profile Allow Categories WildFire Profile File Types Antivirus Profile Decoder WildFire Inline ML Action
Device	TCP Content Inspection Queue UDP Content Inspection Queue TCP out-of-order traffic Failed Attempts Lockout Time Rematch Sessions Report Grayware Files Enabled

 

Review the latest Known Issues 

The following list includes only outstanding known issues specific to Configuration Wizard.

Severity	Description
S3 - Minor	Uploading a file, then trying to upload one again while it’s in the middle of uploading, will cause the progress bar to flicker
S2 - Major	Refreshing page when in Uploading phase then trying to resume upload will result in it getting stuck
S2 - Major	TSF with size greater than 1GB fails to load
S2 - Major	There are some incorrect view and event names being sent incorrectly from wizard pages in Adobe Analytics
S2 - Major	Slow upload problem. This seems to be an inconsistent problem where some users experience longer than 10 min upload times
S3 - Minor	Changing Configuration Wizard and Upload Text to keep consistency - Removing “...” from “Uploading…” - Rename “Parsing TSF” to “Parsing File”

 

Review the Known Issues from the last release

The following list includes known issues specific to Best Practice Assessment Plus that were fixed in this release.

Severity	Description
S2 - Major	Action on DNS Queries for DNS Sinkhole is not set to “sinkhole” still passes
S4 - Trivial	Capitalize "DNS" in "DNS Signatures" and "Dns Sinkhole Settings"
S5- Enhancement	If we let the Configuration Wizard session grow stale after 24 hours and then upload a TSF to the same Configuration Wizard session, the file will start an infinite upload instead of redirecting  to a timeout or back to the SSO page.

 

Getting Help

The following topics provide information on where to find more about this release and how to request support.

Related Documentation

Configuration Wizard Blog Post

Introduction to Configuration Wizard

Configuration Wizard Demo Video

Failed BP checks Remediation Videos

 

Requesting Support

To provide feedback, write to us at: bpaplus@paloaltonetworks.com

For contacting support, for information on support programs, to manage your account or devices, or to open a support case, go to https://support.paloaltonetworks.com