Is there a way to see all raw data collected by GlobalProtect APP ?

saswins — Tue, 14 Dec 2021 00:22:14 GMT

Hi,

I see in the below document, that you need to create HIP Object/Profile to view the raw host data collected by the GlobalProtect APP. My question is there a way to skip this step and see all raw host data collected by GlobalProtect APP without defining the HIP object/profile ?

https://docs.paloaltonetworks.com/globalprotect/9-1/globalprotect-admin/host-information/configure-hip-based-policy-enforcement.html#id168afbfe-e152-461e-8c0b-4a463685c401 => Step 4

https://docs.paloaltonetworks.com/globalprotect/9-1/globalprotect-admin/host-information/configure-hip-based-policy-enforcement.html#id168afbfe-e152-461e-8c0b-4a463685c401

Thanks,

Re: Is there a way to see all raw data collected by GlobalProtect APP ?

nikoolayy1 — Thu, 13 Jan 2022 09:28:32 GMT

The HIP gathering info is what you have to see the info on the end hosts , without it if you have EDR maybe Palo Alto TRAPS or if you use Palo Alto CASB you can see shadow IT cloud apps that your users use:

Next-gen CASB - Palo Alto Networks

Next-Generation CASB Redefines SaaS Security - Palo Alto Networks

Also I think if you have enabled HIP data collection on the portal you should see some HIP info even without the other HIP options:

GlobalProtect Portals Agent Data Collection Tab (paloaltonetworks.com)

topic Is there a way to see all raw data collected by GlobalProtect APP ? in Panorama Discussions

Is there a way to see all raw data collected by GlobalProtect APP ?

Re: Is there a way to see all raw data collected by GlobalProtect APP ?