topic HIP Global Protect in GlobalProtect Discussions

HIP Global Protect

claudiochaves — Tue, 16 Jul 2024 13:26:38 GMT

I want to create a security policy containing a HIP profile as follows: if the connecting machine has ALL category 3 updates installed, certain traffic will be released. I'm very confused about creating this in HIP object, as it is about MISSING PATCHES.

Re: HIP Global Protect

JayGolf — Wed, 17 Jul 2024 02:05:12 GMT

Hi @claudiochaves ,

What HIP objects have you created so far? Could you describe which OS and what type of updates are you looking to filter on?

Re: HIP Global Protect

arusharma — Mon, 28 Oct 2024 08:45:57 GMT

I think you have start here: https://docs.paloaltonetworks.com/globalprotect/10-1/globalprotect-admin/host-information/configure-hip-based-policy-enforcement

You can check this under global protect settings >> Host information profile section under patch management and match accordingly.