Configuration Wizard Release Notes (Version 1.0.0)       About Configuration Wizard The Palo Alto NetworksⓇ Configuration Wizard guides customers step-by-step by providing an intuitive, easy-to-use interface to configure firewalls that aligns with best practices. Configuration Wizard provides customized recommendations to remediate BPA-found issues and improve overall feature adoption and improve security posture.   Customers now get clear insights or direction on how to take action on failed BPA checks and improve security posture after running a BPA report.   Configuration Wizard Highlights   Integrates with BPA tool to quickly deploy remediation from failed best practices on NGFW or Panorama™ capabilities Identifies top 10 most important BPA checks for remediations to confirm the best practice settings being modified. Provide step-by-step configuration guide using the Configuration Wizard to quickly configure PAN-OS features The Configuration Wizard provides a list of Set Commands for quick and easy configuration changes   Configuration Wizard Customer Benefits   Save time and automatically remediate to security best practices.  Lower risk and reduce configuration errors  Quickly deploy across you entire network security infrastructure Maximize your return on your security investment   Review the latest Known Issues The following list includes only outstanding known issues specific to Configuration Wizard.   Severity Description Medium Warning to be displayed  when copying more than 20 lines of CLI commands for PAN-OS Medium Tool creates multiple log forwarding profiles when they already exist. Medium Resume Configuration Wizard is not going to last active page High Antivirus Profile Decoder Actions feature will now only display the options available for the running version PANOS the user is using     Getting Help The following topics provide information on where to find more about this release and how to request support.   Requesting Support For contacting support, for information on support programs, to manage your account or devices, or to open a support case, go to https://support.paloaltonetworks.com   To provide feedback on the documentation, write to us at: bpaplus@paloaltonetworks.com  

  About Configuration Wizard The Palo Alto NetworksⓇ Configuration Wizard guides customers step-by-step by providing an intuitive, easy-to-use interface to configure firewalls that aligns with best practices. Configuration Wizard provides customized recommendations to remediate BPA-found issues and improve overall feature adoption and improve security posture.   Customers now get clear insights or direction on how to take action on failed BPA checks and improve security posture after running a BPA report.   Configuration Wizard Highlights   Integrates with BPA tool to quickly deploy remediation from failed best practices on NGFW or Panorama™ capabilities Identifies top 19 most important BPA checks for remediations to confirm the best practice settings being modified. Provide step-by-step configuration guide using the Configuration Wizard to quickly configure PAN-OS features The Configuration Wizard provides a list of Set Commands for quick and easy configuration changes   Configuration Wizard Customer Benefits   Save time and automatically remediate to security best practices.  Lower risk and reduce configuration errors  Quickly deploy across you entire network security infrastructure Maximize your return on your security investment   Additional Best Practices Checks added to Configuration Wizard   Best Practice Checks That Can Be Remediate with Configuration Wizard Category BPA Checks Objects WildFire Profile File Types Antivirus Profile Decoder WildFire Inline ML Action Device Report Grayware Files Enabled   See the new features introduced in this release Feedback Button - Provide feedback directly to the Configuration Wizard team by clicking on the feedback button on the left side of the tool. Numbered Badge - If you select to go with an Existing Setting a numbered badge appears and increases on the left hand wizard panel next to the best practice check category.   Review the latest Known Issues  The following list includes only outstanding known issues specific to Configuration Wizard. Severity Description S2 - Major Action on DNS Queries for DNS Sinkhole is not set to “sinkhole” still passes S4 - Trivial Capitalize "DNS" in "DNS Signatures" and "Dns Sinkhole Settings" S5 - Enhancement If we let the Configuration Wizard session grow stale after 24 hours and then upload a TSF to the same Configuration Wizard session, the file will start an infinite upload instead of redirecting  to a timeout or back to the SSO page.   Review the Addressed Issues for the latest release The following list includes known issues specific to Configuration Wizard that were fixed in this release. Severity Description S3 - Minor The “please provide valid email” text in the feedback form was not persisting and was coming on and off. S3 - Minor When a user tries to send feedback from the feedback page, the “to” is mapped to the user’s name instead of the Configuration Wizard team’s name. S3 - Minor The Home icon on the navigation bar did not navigate to home when clicked. S3 - Minor When I click on a nested item in the navigation bar, then click Feedback in navigation bar, then Home in navigation bar, then I am back to the tested item in the navigation bar. However, I cannot see that item in the menu in the navigation bar. S1 - Critical When I try to copy the commands for the Vulnerability Protection Profiles, the command is too long. S3 - Minor If the feedback form fields are empty, the Send button should be disabled S2 - Major Upon a TSF upload, and the fields of “existing setting” are toggled on and off, then the user refreshes the page, the last step feature with content shows up on the content section in the wizard; however, the left side panel is not expanded with the correct step named if it is a nested child. Getting Help The following topics provide information on where to find more about this release and how to request support. Related Documentation   Configuration Wizard Blog Post Introduction to Configuration Wizard Configuration Wizard Demo Video Requesting Support To provide feedback, write to us at: bpaplus@paloaltonetworks.com   For contacting support, for information on support programs, to manage your account or devices, or to open a support case, go to https://support.paloaltonetworks.com

  About Configuration Wizard   The Palo Alto NetworksⓇ Configuration Wizard guides customers step-by-step by providing an intuitive, easy-to-use interface to configure firewalls that aligns with best practices. Configuration Wizard provides customized recommendations to remediate BPA-found issues and improve overall feature adoption and improve security posture.   Customers now get clear insights or direction on how to take action on failed BPA checks and improve security posture after running a BPA report.   Configuration Wizard Highlights   Integrates with BPA tool to quickly deploy remediation from failed best practices on NGFW or Panorama™ capabilities Identifies top 13 most important BPA checks for remediations to confirm the best practice settings being modified. Provide step-by-step configuration guide using the Configuration Wizard to quickly configure PAN-OS features The Configuration Wizard provides a list of Set Commands for quick and easy configuration changes   Configuration Wizard Customer Benefits   Save time and automatically remediate to security best practices.  Lower risk and reduce configuration errors  Quickly deploy across you entire network security infrastructure Maximize your return on your security investment Additional Best Practices Checks added to Configuration Wizard   Best Practice Checks That Can Be Remediate with Configuration Wizard Category BPA Checks Objects Antivirus Profile Decoder Wildfire Actions URL Filtering Profile Allow Categories Device TCP out-of-order traffic Failed Attempts Lockout Time Rematch Sessions   See the new features introduced in this release In addition to Best Practice recommended commands Configuration Wizard will now provide a command to take backup of an existing configuration before running recommended configuration. Added option to download all best practice recommended commands instead of copying at the “Generate Commands”.   Review the latest Known Issues    The following list includes only outstanding known issues specific to Configuration Wizard.   Severity Description S2 - Major Action on DNS Queries for DNS Sinkhole is not set to “sinkhole” still passes S4 - Trivial Capitalize "DNS" in "DNS Signatures" and "Dns Sinkhole Settings"   Review the Addressed Issues for the latest release   The following list includes known issues specific to Configuration Wizard that were fixed in this release.   Severity Description Medium Warning to be displayed  when copying more than 20 lines of CLI commands for PAN-OS Medium Tool creates multiple log forwarding profiles when they already exist. Medium Resume Configuration Wizard is not going to last active page High Antivirus Profile Decoder Actions feature will now only display the options available for the running version PANOS the user is using Medium Character length limitation blocking user access Getting Help The following topics provide information on where to find more about this release and how to request support.   Related Documentation   Configuration Wizard Blog Post Introduction to Configuration Wizard Configuration Wizard Demo Video   Requesting Support To provide feedback, write to us at: bpaplus@paloaltonetworks.com   For contacting support, for information on support programs, to manage your account or devices, or to open a support case, go to https://support.paloaltonetworks.com

  About Configuration Wizard   The Palo Alto NetworksⓇ Configuration Wizard guides customers step-by-step by providing an intuitive, easy-to-use interface to configure firewalls that aligns with best practices. Configuration Wizard provides customized recommendations to remediate BPA-found issues and improve overall feature adoption and improve security posture.   Customers now get clear insights or direction on how to take action on failed BPA checks and improve security posture after running a BPA report.   Configuration Wizard Highlights   Integrates with BPA tool to quickly deploy remediation from failed best practices on NGFW or Panorama™ capabilities Identifies top 13 most important BPA checks for remediations to confirm the best practice settings being modified. Provide step-by-step configuration guide using the Configuration Wizard to quickly configure PAN-OS features The Configuration Wizard provides a list of Set Commands for quick and easy configuration changes   Configuration Wizard Customer Benefits   Save time and automatically remediate to security best practices.  Lower risk and reduce configuration errors  Quickly deploy across you entire network security infrastructure Maximize your return on your security investment Additional Best Practices Checks added to Configuration Wizard   Best Practice Checks That Can Be Remediate with Configuration Wizard Category BPA Checks Objects Antivirus Profile Decoder Wildfire Actions URL Filtering Profile Allow Categories Device TCP out-of-order traffic Failed Attempts Lockout Time Rematch Sessions   See the new features introduced in this release   In addition to Best Practice recommended commands Configuration Wizard will now provide a command to take backup of an existing configuration before running recommended configuration. Added option to download all best practice recommended commands instead of copying at the “Generate Commands”.   Review the latest Known Issues    The following list includes only outstanding known issues specific to Configuration Wizard. Severity Description S2 - Major Action on DNS Queries for DNS Sinkhole is not set to “sinkhole” still passes S4 - Trivial Capitalize "DNS" in "DNS Signatures" and "Dns Sinkhole Settings"   Review the Addressed Issues for the latest release   The following list includes known issues specific to Configuration Wizard that were fixed in this release. Severity Description Medium Warning to be displayed  when copying more than 20 lines of CLI commands for PAN-OS Medium Tool creates multiple log forwarding profiles when they already exist. Medium Resume Configuration Wizard is not going to last active page High Antivirus Profile Decoder Actions feature will now only display the options available for the running version PANOS the user is using   Getting Help The following topics provide information on where to find more about this release and how to request support.   Related Documentation   Configuration Wizard Blog Post Introduction to Configuration Wizard Configuration Wizard Demo Video   Requesting Support To provide feedback, write to us at: bpaplus@paloaltonetworks.com   For contacting support, for information on support programs, to manage your account or devices, or to open a support case, go to https://support.paloaltonetworks.com

Configuration Wizard Release Notes Version 1.3.0     About Configuration Wizard The Palo Alto NetworksⓇ Configuration Wizard guides customers step-by-step by providing an intuitive, easy-to-use interface to configure firewalls that aligns with best practices. Configuration Wizard provides customized recommendations to remediate BPA-found issues and improve overall feature adoption and improve security posture.   Customers now get clear insights or direction on how to take action on failed BPA checks and improve security posture after running a BPA report.   Configuration Wizard Highlights   Integrates with BPA tool to quickly deploy remediation from failed best practices on NGFW or Panorama™ capabilities Identifies top 20 most important BPA checks for remediations to confirm the best practice settings being modified. Provide step-by-step configuration guide using the Configuration Wizard to quickly configure PAN-OS features The BPA+ Configuration Wizard provides a list of Set Commands for quick and easy configuration changes   Configuration Wizard Customer Benefits   Save time and automatically remediate to security best practices.  Lower risk and reduce configuration errors  Quickly deploy across you entire network security infrastructure Maximize your return on your security investment Additional Best Practices Check added to Configuration Wizard   Category BPA Checks Device Script File Size Limit   Existing Best Practices Checks Supported by Configuration Wizard   Category BPA Checks Policies Interzone Deny Rule with Logging Intrazone Allow Rules with Logging Malicious IP address Feed (Inbound) Malicious IP Address Feed (Outbound) High Risk IP Address (Inbound) High Risk IP Address (Outbound) Objects Antivirus Profile Decoder Actions DNS Sinkhole Antivirus Profile Decoder Wildfire Actions URL Filtering Profile Allow Categories WildFire Profile File Types Antivirus Profile Decoder WildFire Inline ML Action Device TCP Content Inspection Queue UDP Content Inspection Queue TCP out-of-order traffic Failed Attempts Lockout Time Rematch Sessions Report Grayware Files Enabled   Review the latest Known Issues    The following list includes only outstanding known issues specific to Configuration Wizard.   Severity Description S3 - Minor Uploading a file, then trying to upload one again while it’s in the middle of uploading, will cause the progress bar to flicker S2 - Major Refreshing page when in Uploading phase then trying to resume upload will result in it getting stuck S2 - Major TSF with size greater than 1GB fails to load S2 - Major There are some incorrect view and event names being sent incorrectly from wizard pages in Adobe Analytics S2 - Major Slow upload problem. This seems to be an inconsistent problem where some users experience longer than 10 min upload times S3 - Minor Changing Configuration Wizard and Upload Text to keep consistency - Removing “...” from “Uploading…” - Rename “Parsing TSF” to “Parsing File”   Review the Known Issues from the last release The following list includes known issues specific to Best Practice Assessment Plus that were fixed in this release.   Severity Description S2 - Major Action on DNS Queries for DNS Sinkhole is not set to “sinkhole” still passes S4 - Trivial Capitalize "DNS" in "DNS Signatures" and "Dns Sinkhole Settings" S5- Enhancement If we let the Configuration Wizard session grow stale after 24 hours and then upload a TSF to the same Configuration Wizard session, the file will start an infinite upload instead of redirecting  to a timeout or back to the SSO page.   Getting Help The following topics provide information on where to find more about this release and how to request support. Related Documentation   Configuration Wizard Blog Post Introduction to Configuration Wizard Configuration Wizard Demo Video Failed BP checks Remediation Videos   Requesting Support To provide feedback, write to us at: bpaplus@paloaltonetworks.com   For contacting support, for information on support programs, to manage your account or devices, or to open a support case, go to https://support.paloaltonetworks.com

  About Configuration Wizard The Palo Alto NetworksⓇ Configuration Wizard guides customers step-by-step by providing an intuitive, easy-to-use interface to configure firewalls that aligns with best practices.Configuration Wizard provides customized recommendations to remediate BPA-found issues and improve overall feature adoption and improve security posture.   Customers now get clear insights or direction on how to take action on failed BPA checks and improve security posture after running a BPA report.   Configuration Wizard Highlights   Integrates with BPA tool to quickly deploy remediation from failed best practices on NGFW or Panorama™ capabilities Identifies top 29 most important BPA checks for remediations to confirm the best practice settings being modified. Provide step-by-step configuration guide using the Configuration Wizard to quickly configure PAN-OS features The Configuration Wizard provides a list of Set Commands for quick and easy configuration changes   Configuration Wizard Customer Benefits   Save time and automatically remediate to security best practices.  Lower risk and reduce configuration errors  Quickly deploy across you entire network security infrastructure Maximize your return on your security investment Additional Best Practices Check added to Configuration Wizard   Best Practice Checks That Can Be Remediate with Configuration Wizard Category BPA Checks Device PE File Size Limit PDF File Size Limit MacOSX File Size Limit APK File Size Limit Archive File Size Limit Flash File Size Limit Jar File Size Limit Linux File Size Limit MS Office File Size Limit   Existing Best Practices Checks Supported by Configuration Wizard   Best Practice Checks That Can Be Remediate with Configuration Wizard Category BPA Checks Policies Interzone Deny Rule with Logging Intrazone Allow Rules with Logging Malicious IP address Feed (Inbound) Malicious IP Address Feed (Outbound) High Risk IP Address (Inbound) High Risk IP Address (Outbound) Objects Antivirus Profile Decoder Actions DNS Sinkhole Antivirus Profile Decoder Wildfire Actions URL Filtering Profile Allow Categories WildFire Profile File Types Antivirus Profile Decoder WildFire Inline ML Action Device TCP Content Inspection Queue UDP Content Inspection Queue TCP out-of-order traffic Failed Attempts Lockout Time Rematch Sessions Report Grayware Files Enabled Script File Size Limit PE File Size Limit PDF File Size Limit MacOSX File Size Limit APK File Size Limit Archive File Size Limit Flash File Size Limit Jar File Size Limit Linux File Size Limit MS Office File Size Limit     Review the latest Known Issues    The following list includes only outstanding known issues specific to Configuration Wizard. Severity Description S3 - Minor Uploading a file, then trying to upload one again while it’s in the middle of uploading, will cause the progress bar to flicker S2 - Major Action on DNS Queries for DNS Sinkhole is not set to “sinkhole” still passes S3- Minor Tool creating multiple log forwarding profiles when they already exist.   Review the Addressed Issues for the latest release   The following list includes known issues specific to Best Practice Assessment Plus that were fixed in this release. Severity Description S4 - Trivial Capitalize "DNS" in "DNS Signatures" and "Dns Sinkhole Settings" S5- Enhancement If we let the Configuration Wizard session grow stale after 24 hours and then upload a TSF to the same Configuration Wizard session, the file will start an infinite upload instead of redirecting  to a timeout or back to the SSO page. S3 - Minor Changing Configuration Wizard and Upload Text to keep consistency - Removing “...” from “Uploading…” - Rename “Parsing TSF” to “Parsing File” S5 - Enhancement On the homepage, it says “Upload TSF File”. Just change to “Upload Technical Support File”, since F stands for file. S5 - Enhancement Remove unnecessary Cancel button on the bottom of the page S3 - Minor When a file with no remediations needed is uploaded, the Learn More button leads to a blank page S2 - Major Refreshing page when in Uploading phase then trying to resume upload will result in it getting stuck   Getting Help The following topics provide information on where to find more about this release and how to request support.   Related Documentation   Configuration Wizard Blog Post Introduction to Configuration Wizard Configuration Wizard Demo Video Failed BP checks Remediation Videos   Requesting Support To provide feedback, write to us at: bpaplus@paloaltonetworks.com For contacting support, for information on support programs, to manage your account or devices, or to open a support case, go to https://support.paloaltonetworks.com