https://live.paloaltonetworks.com/t5/next-generation-firewall/pan-294687-hip-report-synchronization-and-globalprotect-gateway/m-p/1262817#M7109 <DIV> <DIV><SPAN>Hi Team,</SPAN></DIV> <DIV>&nbsp;</DIV> <DIV><SPAN>We are investigating PAN-294687 and would like clarification on the following points.</SPAN></DIV> <DIV>&nbsp;</DIV> <DIV><SPAN>1. In an NGFW Cluster, how are HIP Reports shared between Panorama, the Leader Node, and Non-Leader Nodes?</SPAN></DIV> <DIV><SPAN> Specifically, is HIP Report synchronization between the Leader Node and Non-Leader Nodes performed directly, or through Panorama?</SPAN></DIV> <DIV>&nbsp;</DIV> <DIV><SPAN>2. Public documentation states that HIP Reports are collected by GlobalProtect Gateways, while PAN-294687 states that the Leader Node cannot retrieve HIP Reports from Panorama.</SPAN></DIV> <DIV><SPAN> Could you explain the relationship between HIP Reports received by GlobalProtect Gateways and HIP Reports retrieved from Panorama?</SPAN></DIV> <DIV>&nbsp;</DIV> <DIV><SPAN>3. If a GlobalProtect Gateway is configured only on the Leader Node, could this mitigate or avoid the impact of PAN-294687?</SPAN></DIV> <DIV><SPAN> If not, could you explain why?</SPAN></DIV> <DIV>&nbsp;</DIV> <DIV><SPAN>Any documentation references or implementation details would be appreciated.</SPAN></DIV> <DIV>&nbsp;</DIV> <DIV><SPAN>Thank you.</SPAN></DIV> </DIV> <P><LI-WRAPPER></LI-WRAPPER></P> Tue, 25 Aug 2026 10:55:58 GMT f.yanai 2026-08-25T10:55:58Z https://live.paloaltonetworks.com/t5/next-generation-firewall/pan-294687-hip-report-synchronization-and-globalprotect-gateway/m-p/1262817#M7109 <DIV> <DIV><SPAN>Hi Team,</SPAN></DIV> <DIV>&nbsp;</DIV> <DIV><SPAN>We are investigating PAN-294687 and would like clarification on the following points.</SPAN></DIV> <DIV>&nbsp;</DIV> <DIV><SPAN>1. In an NGFW Cluster, how are HIP Reports shared between Panorama, the Leader Node, and Non-Leader Nodes?</SPAN></DIV> <DIV><SPAN> Specifically, is HIP Report synchronization between the Leader Node and Non-Leader Nodes performed directly, or through Panorama?</SPAN></DIV> <DIV>&nbsp;</DIV> <DIV><SPAN>2. Public documentation states that HIP Reports are collected by GlobalProtect Gateways, while PAN-294687 states that the Leader Node cannot retrieve HIP Reports from Panorama.</SPAN></DIV> <DIV><SPAN> Could you explain the relationship between HIP Reports received by GlobalProtect Gateways and HIP Reports retrieved from Panorama?</SPAN></DIV> <DIV>&nbsp;</DIV> <DIV><SPAN>3. If a GlobalProtect Gateway is configured only on the Leader Node, could this mitigate or avoid the impact of PAN-294687?</SPAN></DIV> <DIV><SPAN> If not, could you explain why?</SPAN></DIV> <DIV>&nbsp;</DIV> <DIV><SPAN>Any documentation references or implementation details would be appreciated.</SPAN></DIV> <DIV>&nbsp;</DIV> <DIV><SPAN>Thank you.</SPAN></DIV> </DIV> <P><LI-WRAPPER></LI-WRAPPER></P> Tue, 25 Aug 2026 10:55:58 GMT https://live.paloaltonetworks.com/t5/next-generation-firewall/pan-294687-hip-report-synchronization-and-globalprotect-gateway/m-p/1262817#M7109 f.yanai 2026-08-25T10:55:58Z