Prisma Access HIP object Windows patch management

K.Herath — Wed, 29 Jul 2026 00:41:24 GMT

We have created a HIP profile and configured windows patch management. However, the options under this is not very clear. I have to get some clarifications on this

Missing Patches - Severity

When the operator is set to Greater Than or Equal To, what values are valid in the field?
We currently use 3, assuming this represents Critical Windows security patches. Please clarify whether this is correct and what the other values represent.
What do each of the three options in the Check drop-down mean?
How does each option behave when the Item Table is populated or left empty?
Enforcement outcome

If the HIP profile is attached to a deny security policy, which combinations would block a Windows endpoint with missing Critical security patches?
What other useful enforcement outcomes can be achieved through different combinations of these settings?

topic Prisma Access HIP object Windows patch management in General Topics

Prisma Access HIP object Windows patch management