05-23-2022 04:15 PM - edited 06-10-2022 01:58 PM
The Palo Alto NetworksⓇ Configuration Wizard guides customers step-by-step by providing an intuitive, easy-to-use interface to configure firewalls that aligns with best practices.Configuration Wizard provides customized recommendations to remediate BPA-found issues and improve overall feature adoption and improve security posture.
Customers now get clear insights or direction on how to take action on failed BPA checks and improve security posture after running a BPA report.
|
Best Practice Checks That Can Be Remediate with Configuration Wizard |
|
|
Category |
BPA Checks |
|
Device |
PE File Size Limit PDF File Size Limit MacOSX File Size Limit APK File Size Limit Archive File Size Limit Flash File Size Limit Jar File Size Limit Linux File Size Limit MS Office File Size Limit |
|
Best Practice Checks That Can Be Remediate with Configuration Wizard |
|
|
Category |
BPA Checks |
|
Policies |
Interzone Deny Rule with Logging Intrazone Allow Rules with Logging Malicious IP address Feed (Inbound) Malicious IP Address Feed (Outbound) High Risk IP Address (Inbound) High Risk IP Address (Outbound) |
|
Objects |
Antivirus Profile Decoder Actions DNS Sinkhole Antivirus Profile Decoder Wildfire Actions URL Filtering Profile Allow Categories WildFire Profile File Types Antivirus Profile Decoder WildFire Inline ML Action |
|
Device |
TCP Content Inspection Queue UDP Content Inspection Queue TCP out-of-order traffic Failed Attempts Lockout Time Rematch Sessions Report Grayware Files Enabled Script File Size Limit PE File Size Limit PDF File Size Limit MacOSX File Size Limit APK File Size Limit Archive File Size Limit Flash File Size Limit Jar File Size Limit Linux File Size Limit MS Office File Size Limit |
The following list includes only outstanding known issues specific to Configuration Wizard.
|
Severity |
Description |
|
S3 - Minor |
Uploading a file, then trying to upload one again while it’s in the middle of uploading, will cause the progress bar to flicker |
|
S2 - Major |
Action on DNS Queries for DNS Sinkhole is not set to “sinkhole” still passes |
|
S3- Minor |
Tool creating multiple log forwarding profiles when they already exist. |
The following list includes known issues specific to Best Practice Assessment Plus that were fixed in this release.
|
Severity |
Description |
|
S4 - Trivial |
Capitalize "DNS" in "DNS Signatures" and "Dns Sinkhole Settings" |
|
S5- Enhancement |
If we let the Configuration Wizard session grow stale after 24 hours and then upload a TSF to the same Configuration Wizard session, the file will start an infinite upload instead of redirecting to a timeout or back to the SSO page. |
|
S3 - Minor |
Changing Configuration Wizard and Upload Text to keep consistency |
|
S5 - Enhancement |
On the homepage, it says “Upload TSF File”. Just change to “Upload Technical Support File”, since F stands for file. |
|
S5 - Enhancement |
Remove unnecessary Cancel button on the bottom of the page |
|
S3 - Minor |
When a file with no remediations needed is uploaded, the Learn More button leads to a blank page |
|
S2 - Major |
Refreshing page when in Uploading phase then trying to resume upload will result in it getting stuck |
The following topics provide information on where to find more about this release and how to request support.
Configuration Wizard Blog Post
Introduction to Configuration Wizard
Configuration Wizard Demo Video
Failed BP checks Remediation Videos
To provide feedback, write to us at: bpaplus@paloaltonetworks.com
For contacting support, for information on support programs, to manage your account or devices, or to open a support case, go to https://support.paloaltonetworks.com
