Check patchs installed HIP

Es_tecsupportsecurity — Wed, 17 May 2017 14:41:00 GMT

Hi,

We configured the HIP module in Palo Alto but is not able to detect patches installed on Global Protect clients sometimes.
There are clients, connected to the VPN GP that if it is able to see the patches, in contrast there are others that does not detect any patch installed.
We would like to prevent the propagation of WannaCry through the GP VPN connection.

Why sometimes its not detecting the patches installed???

This is our HIP profile:

not "Antivirus_Deny_WinDefender" and "Antivirus_Deny_Sin_Antivirus" and not "Update_Windows_KB4013389"

i attach a HIP log, where we can NOT see any patchs detected. In several hosts take the patch installed, in anothers not.

thanks

Re: Check patchs installed HIP

Es_tecsupportsecurity — Thu, 18 May 2017 14:53:53 GMT

Hi,

So we realisedd that we didnt have any "Global protect data file" installed so we didnt see any patches,AV,etc. We have installed this packet and now we can see all SW installed. But it seems like we have any restrictions in our laptops that we cant detect the patches. Is it necessary any kind of permissionof enable anythign in order to let the GP read all Software???

topic Re: Check patchs installed HIP in General Topics

Check patchs installed HIP

Re: Check patchs installed HIP