topic Re: Question about HIP, plist check wildcard in GlobalProtect Discussions

Question about HIP, plist check wildcard

Janus_Hermansen — Thu, 02 Mar 2023 11:38:52 GMT

Hello all,

I was wondering if the value of my made plist can have wildcard.
I have currently made one that checks the plist "com.apple.softwareupdate" to find the OS version, and wanted the key value to be, as an example "13.2*" or even "13*".

I know there is an already made one that checks for OS version by paloalto, however I wanna input this to the Portals configuration, since I dont want people with a version lower than 10.7 as an example, to even get an ip and just be denied access.

If there however is another way to do this I would appreciate that aswell.

I hope this is the right place to ask this, if not could you please tell me where I am kind a new to this.

Thanks for your time and have a good day.

Re: Question about HIP, plist check wildcard

Janus_Hermansen — Thu, 02 Mar 2023 12:39:10 GMT

I need to clarify something, currently I am not putting these on the portal, however setting them as HIP objects/profiles to see if the hit matches. If i type out the entire OS version, the HIP object/profile gets a hit, however when I dont, the HIP object/profile doesn't

The custom check goes through as shown in this picture:

However the HIP object and profile I made does not seem to get my device.

HIP object:

So as far as I can tell, the HIP information is gathered, however the HIP object is not checked as getting a hit. Thus it would not recognize my device as part of the OS version " 13.* " I have also just tried " 13* " and that did not work either.

Re: Question about HIP, plist check wildcard

Janus_Hermansen — Mon, 06 Mar 2023 12:01:45 GMT

This is still a problem, and might continue to be since noone is replying. I will be closing this in one weeks time and accepting this as an answer.

If I do ever find what I am looking for I will be posting it.

Re: Question about HIP, plist check wildcard

bruce.johnson — Fri, 17 Mar 2023 12:57:28 GMT

I don't think you can use a wildcard. See the knowledgebase article below. "Since we don't do a regular expression match for HIP OS, we cannot use asterisk as HIP OS match."

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000boJ3CAI