topic Re: Globalprotect still cant report missing patches on MAC OS? in General Topics

Globalprotect still cant report missing patches on MAC OS?

ulti — Mon, 21 Sep 2015 19:34:29 GMT

The last version that didn't have this "known issue" was 2.2.0, based on release notes. Even the most recent release, 2.3.1, has bug id 77018 and wont report missing patches on the mac. Any idea when Palo will resolve this? It seems to severely limit a key feature we and others use Globalprotect as a vpn solution if one can't enforce HIP checks on macs - and seems to be a known issue for quite some time. Any ideas what's the limiting factor here, Palo?

Re: Globalprotect still cant report missing patches on MAC OS?

jjhernandez — Wed, 23 Sep 2015 08:59:18 GMT

BugID 77018 is still open in the GlobalProtect 2.3.2 release notes. A properly patched client is the first defense against malware. Bluntly: The vulnerability that isn't there can't be exploited. GlobalProtect being unable to validate patching for OSX is a big gap (gaping hole?) in the posture assessment capability.

Is there a timeline and version for the fixed version to be released?

Re: Globalprotect still cant report missing patches on MAC OS?

ulti — Tue, 06 Oct 2015 20:04:56 GMT

agreed - hipcheck was a big reason why we went with GP over other vpn solutions... sigh