Configuration Wizard Release Notes Version 1.4.0

cancel
Showing results for 
Search instead for 
Did you mean: 
L4 Transporter
Did you find this article helpful? Yes No
No ratings

 

About Configuration Wizard

The Palo Alto Networks Configuration Wizard guides customers step-by-step by providing an intuitive, easy-to-use interface to configure firewalls that aligns with best practices.Configuration Wizard provides customized recommendations to remediate BPA-found issues and improve overall feature adoption and improve security posture.

 

Customers now get clear insights or direction on how to take action on failed BPA checks and improve security posture after running a BPA report.

 

Configuration Wizard Highlights

 

  • Integrates with BPA tool to quickly deploy remediation from failed best practices on NGFW or Panorama™ capabilities
  • Identifies top 29 most important BPA checks for remediations to confirm the best practice settings being modified.
  • Provide step-by-step configuration guide using the Configuration Wizard to quickly configure PAN-OS features
  • The Configuration Wizard provides a list of Set Commands for quick and easy configuration changes

 

Configuration Wizard Customer Benefits

 

  • Save time and automatically remediate to security best practices. 
  • Lower risk and reduce configuration errors 
  • Quickly deploy across you entire network security infrastructure
  • Maximize your return on your security investment



Additional Best Practices Check added to Configuration Wizard

 

Best Practice Checks That Can Be Remediate with Configuration Wizard

Category

BPA Checks

Device

PE File Size Limit

PDF File Size Limit

MacOSX File Size Limit

APK File Size Limit

Archive File Size Limit

Flash File Size Limit

Jar File Size Limit

Linux File Size Limit

MS Office File Size Limit

 

Existing Best Practices Checks Supported by Configuration Wizard

 

Best Practice Checks That Can Be Remediate with Configuration Wizard

Category

BPA Checks

Policies

Interzone Deny Rule with Logging

Intrazone Allow Rules with Logging

Malicious IP address Feed (Inbound)

Malicious IP Address Feed (Outbound)

High Risk IP Address (Inbound)

High Risk IP Address (Outbound)

Objects

Antivirus Profile Decoder Actions

DNS Sinkhole

Antivirus Profile Decoder Wildfire Actions

URL Filtering Profile Allow Categories

WildFire Profile File Types

Antivirus Profile Decoder WildFire Inline ML Action

Device

TCP Content Inspection Queue

UDP Content Inspection Queue

TCP out-of-order traffic

Failed Attempts

Lockout Time

Rematch Sessions

Report Grayware Files Enabled

Script File Size Limit

PE File Size Limit

PDF File Size Limit

MacOSX File Size Limit

APK File Size Limit

Archive File Size Limit

Flash File Size Limit

Jar File Size Limit

Linux File Size Limit

MS Office File Size Limit

 

 

Review the latest Known Issues 

 

The following list includes only outstanding known issues specific to Configuration Wizard.

Severity

Description

S3 - Minor

Uploading a file, then trying to upload one again while it’s in the middle of uploading, will cause the progress bar to flicker

S2 - Major

Action on DNS Queries for DNS Sinkhole is not set to “sinkhole” still passes

S3- Minor

Tool creating multiple log forwarding profiles when they already exist.

 

Review the Addressed Issues for the latest release

 

The following list includes known issues specific to Best Practice Assessment Plus that were fixed in this release.

Severity

Description

S4 - Trivial

Capitalize "DNS" in "DNS Signatures" and "Dns Sinkhole Settings"

S5- Enhancement

If we let the Configuration Wizard session grow stale after 24 hours and then upload a TSF to the same

Configuration Wizard session, the file will start an infinite upload instead of redirecting  to a timeout or back to the SSO page.

S3 - Minor

Changing Configuration Wizard and Upload Text to keep consistency
- Removing “...” from “Uploading…”
- Rename “Parsing TSF” to “Parsing File”

S5 - Enhancement

On the homepage, it says “Upload TSF File”. Just change to “Upload Technical Support File”, since F stands for file.

S5 - Enhancement

Remove unnecessary Cancel button on the bottom of the page

S3 - Minor

When a file with no remediations needed is uploaded, the Learn More button leads to a blank page

S2 - Major

Refreshing page when in Uploading phase then trying to resume upload will result in it getting stuck

 

Getting Help

The following topics provide information on where to find more about this release and how to request support.

 

Related Documentation

 

Configuration Wizard Blog Post

Introduction to Configuration Wizard

Configuration Wizard Demo Video

Failed BP checks Remediation Videos

 

Requesting Support

To provide feedback, write to us at: bpaplus@paloaltonetworks.com

For contacting support, for information on support programs, to manage your account or devices, or to open a support case, go to https://support.paloaltonetworks.com

Rate this article:
Register or Sign-in
Contributors
Article Dashboard
Version history
Last update:
‎06-10-2022 01:58 PM
Updated by: