Skip to main content

AIOps for NGFW Best Practice Assessment APIs

The Palo Alto Networks Best Practice Assessment (BPA) measures your usage of our Next-Generation Firewall (NGFW) and Panorama™ security management capabilities across your deployment, enabling you to make adjustments that maximize your return on investment and strengthen security.

This API enables you to programmatically generate BPA data for both the free and premium instances of AIOps for NGFW.

With the API, you can:

  1. Generate a BPA Report.
  2. Get the Status of a Generated BPA Report.
  3. Get the BPA Report in JSON Format.

For more BPA-related privacy information, please refer to our AIOps for NGFW.

Contact us at if you have any questions, concerns, or feature requests.


These APIs use the common SASE authentication for service access and authorization.

Once you have a TSG, you can create a service account for it. When you create a service account, you get a Client ID and Client Secret, which you need in order to get an access token. You must also use your TSG's ID when you create an access token.