topic Global protect and HIP profiles problem in General Topics

Global protect and HIP profiles problem

mgusta — Tue, 22 Sep 2015 07:04:26 GMT

Hi,

Lately I´ve been having issues with clients connecting to Global Protect. They pass the HIP match (no warning message is shown when they connect) but still the security policys with the HIP profile doesn´t apply, instead they hit a deny policy. After disconnecting and trying again for a couple of times it suddenly works and the appropriate security policy is applied.

Has anyone else exprinced this? Is there any way of troubleshooting this? If I remeber correctly there are no cli commands to debug why the traffic gets rejected by a policy with a HIP profile apllied.

Best Regards,

Mikael

Re: Global protect and HIP profiles problem

ulti — Tue, 22 Sep 2015 16:11:13 GMT

It would probaly help to mention what PAN version, Global protect client version and OS version you're on.

BTW:
https://live.paloaltonetworks.com/t5/Discussions/Globalprotect-still-cant-report-missing-patches-on-MAC-OS/m-p/64904#U64904

Re: Global protect and HIP profiles problem

mgusta — Tue, 22 Sep 2015 17:21:02 GMT

Yes,

PANOS 7.01, GP Client 2.3.1-7. OS W7.

Thanks,

Mikael