Hi All, I have set all my zones with zone protection but after running BPA the zone protection adoption result is 90%, i have tested same on other firewall and get 97%, what i'm missing, Is it possible to get 100%? Online manual says: (https://docs.paloaltonetworks.com/best-practices/9-0/bpa-getting-started/evaluate-security-policy-capability-adoption/review-the-adoption-summary.html) Zone Protection Adoption —Adoption of Zone protection across Security policy allow rules. The percentage value is based on the total number of allow rules in which the source zone has a Zone Protection profile configured. The BPA doesn’t count disabled rules. If all zones have zone protection then is not possible there is an allow rule without zone protection on source zone. Same concept on Antivirus, urlfiltering, etc and I can get 100% without problems. Thanks!
... View more