topic Re: Exclude Device from HIP check in GlobalProtect Discussions

Exclude Device from HIP check

thoffman — Fri, 04 Feb 2022 16:30:57 GMT

Hello,

I have setup a HIP object\profile that does not allow a computer to connect if it does not belong to our domain and it is working as it should.

My question is if there is a way to exclude a device from this HIP check and it would be allowed to connect and have access to the domain?

Thank you in advance,

Tom

Re: Exclude Device from HIP check

easilycertified — Thu, 08 Sep 2022 17:56:10 GMT

Hi Tom,

Did you ever find a way to accomplish this? Trying to do the same myself.

James

Re: Exclude Device from HIP check

BPry — Thu, 08 Sep 2022 20:49:11 GMT

@easilycertified,

There's not a way to exclude a particular device for HIP object/profile identification. You can however simply create an exception for said host by making a specific HIP Object for said host and excluding the object from the profile you are targeting.

Re: Exclude Device from HIP check

easilycertified — Fri, 09 Sep 2022 13:11:42 GMT

@BPry

This did the trick - thank you for the idea! Quicker and easier than PA support 😛

Have a good one.

Re: Exclude Device from HIP check

thoffman — Fri, 09 Sep 2022 13:25:44 GMT

I am sorry for the late reply but that is what I did also.

Tom

Re: Exclude Device from HIP check

Venerzky — Thu, 05 Dec 2024 05:32:18 GMT

How to do this please?