05-15-2026 04:19 AM
I used to run BPA in Strata Cloud Manager, but now when I log in I can’t find the On-Demand BPA option. How can I run a Best Practice Assessment on a Palo Alto firewall?
05-19-2026 02:48 AM
Hi,
I can't find this menu on SCM Essential (AIOPs don't exist enymore).
I have BPA user and Super user permission on CSP.
I found this thread that ask the same issue:
https://live.paloaltonetworks.com/t5/strata-cloud-manager/new-reports-on-demand-bpa/td-p/1252110
Did you find the right way to do the old on-demand BPA with TSF?
I did it to get the partner points.
05-19-2026 07:40 AM
You need to have the AIOPS premium or SCM pro license
The bpa is located in Insights > Posture > Best Practices, but it is only available for firewalls connected to SCM, you can't run an ad-hoc BPA anymore....
the only place left you can run your own BPA is via the API:
https://pan.dev/aiops-ngfw-bpa/api/
05-19-2026 08:04 AM
Ok thanks.
So, the partner point for BPA are no longer used? Or do we need to use the API?
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
