I would like to know whether Palo Alto support crowd strike antivirus endpoint monitoring ( Antivirus update check ) before connecting any user to VPN

Amoltelore — Sat, 12 Feb 2022 03:57:03 GMT

I would like to know whether Palo Alto support crowd strike antivirus endpoint monitoring ( Antivirus update check ) before connecting any user to VPN network or not.

If yes, Please let me know document for deployment steps.

Re: I would like to know whether Palo Alto support crowd strike antivirus endpoint monitoring ( Antivirus update check ) before connecting any user to

TomYoung — Sat, 12 Feb 2022 05:50:34 GMT

Hello @Amoltelore ,

Yes, the NGFW does support CrowdStrike in a HIP Object. A GlobalProtect license is require for HIP enforcement. Finally, the NGFW does not disconnect the user, but the security policy is used to allow or block traffic. See the URLs below.

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000HBMYCA4&lang=en_US%E2%80%A9

https://docs.paloaltonetworks.com/globalprotect/10-0/globalprotect-admin/host-information/configure-hip-based-policy-enforcement.html

Thanks,

Tom

topic I would like to know whether Palo Alto support crowd strike antivirus endpoint monitoring ( Antivirus update check ) before connecting any user to VPN in General Topics

I would like to know whether Palo Alto support crowd strike antivirus endpoint monitoring ( Antivirus update check ) before connecting any user to VPN

Re: I would like to know whether Palo Alto support crowd strike antivirus endpoint monitoring ( Antivirus update check ) before connecting any user to