Inconsistent BPA Results

[magates]

I am getting unexpected results with Best Practice Analysis. For instance, Going to Best Practice > Security Policies shows red X for all tags and many descriptions, but the majority of my policies have both.  

Also, the adoption diagram shows 0% for High Availability, but I have HA configured to nearly all best practice specifications. Dynamic Updates is similar, shows 60% but I have it configured to complete best practice specs.

Just wondering if this is user error, a bug, or if BPA is not 100% production ready yet.

[alestevez]

Hi,

We upgraded the BPA to the latest version 3.6.1 in our Expedition 1.0.107, can you update and try with that to see if still doesnt make sense the output? Thx

[magates]

Just updated to 1.0.107, getting the same results.

[alestevez]

Have you run the BPA after the update and you get same results? What are the ones you think are incorrect? Thx

[magates]

I have; I also created a new project, imported, and ran BPA with same results. The items listed in my original post are incorrect.

Additionally, as a test I implemented allowed IP addresses on my management interface, but the check still fails as though it is not implemented.

[alestevez]

Im adding Customer success to check since the BPA is something we cannot change by our own :-) I will update here with the findings

[magates]

Thank you, I appreciate your assistance.

[anmendoza]

Hi magates, can you please send an email to customersuccesstools@paloaltonetworks.com so we can help troubleshoot your issue?

[KlausGroeger]

Have the same issue here. Running latest version 1.0.107 with BPA 3.6.1. All policies have tags red x-ed while only four out of 73 policies has no tag.