topic Re: HIP check is slow in GlobalProtect Discussions

HIP check is slow

buck1 — Fri, 16 Oct 2020 13:41:22 GMT

Anybody else experiencing slowness with HIP check? Our clients establish an initial connection very quickly (about 5 seconds). But then the process of doing the HIP check actually takes an additional 40-50 seconds. I can clearly see in the logs that the HIP check takes this long to occur, and so users aren't able to access certain resources until this check completes. Any best practices for shortening this time? We are currently doing three main checks:

Domain join check

Check for BigFix

Check for Sentinel One

My next steps will be to remove these checks one by one and see if it makes any difference. I'm not sure exactly how HIP check works, if it checks everything regardless, or if it only checks what you tell it to check. So not sure if removing single items will make any difference.

Re: HIP check is slow

MP18 — Fri, 16 Oct 2020 17:52:09 GMT

Which GP version are you running?

Also please check below Link for how HIP check works and how to fix issues related to HIP.

https://live.paloaltonetworks.com/t5/general-topics/globalprotect-hip-check-issue/m-p/318137#M81717

Regards

Re: HIP check is slow

buck1 — Fri, 16 Oct 2020 20:24:04 GMT

Running 5.2.3

Re: HIP check is slow

MP18 — Fri, 16 Oct 2020 20:41:48 GMT

@buck1

We do not have HIP check in our environment.

You can try below command it will generate lot of output.

See if that helps you?

debug user-id dump hip-report computer xxxx user admin ip xxxxx

Re: HIP check is slow

MartinE — Fri, 05 Mar 2021 10:26:59 GMT

Hi,

Did you get a fix for this problem? I'm having the same issue with 40-50second delays for HIP. It means DNS resolution fails in that time and certain apps don't work including errors from Outlook.