topic Re: HIP Notification + Windows Updates in Panorama Discussions

HIP Notification + Windows Updates

treingruber — Wed, 30 Aug 2023 22:22:24 GMT

I have HIP notifications set up when users do not have Microsoft patches greater than or equal 2 severity. I would like to only notify them if it is a Windows Update, specifically security updates. As of now, they are getting the notification for any patch from Microsoft with the severity greater than or equal to 2. I see in the GlobalProtect Host Information Profile that there is also a category field that specifies "security_update" in the patch management tab. I was wondering if I can configure my HIP check to specify missing patches from Microsoft and also include the category "security_update". In Panorama when configuring the HIP check, there isn't a field for category. Please advise.

Re: HIP Notification + Windows Updates

akuzhuppilly — Tue, 05 Sep 2023 03:16:09 GMT

Hello @treingruber

The below document explains how to configure HIP checks for missing Microsoft patches.

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClGyCAK

With this, you have the option to create HIP notification to update the user for the missing patches.

Re: HIP Notification + Windows Updates

treingruber — Tue, 05 Sep 2023 14:02:43 GMT

I have it set up similar to that article. I'm mainly looking to see if I can configure the HIP checks to look specifically for windows updates and not ex. Internet Explorer updates as seen in the article.