GlobalProtect HIP not identifying products.

cengasser — Tue, 24 Oct 2017 13:22:21 GMT

Hi.

I have two different HA-pairs with GP VPN configured on them. I'm trying to get HIP to work on the client, but I'm running into issues.

First issue is there are a number of applications we're checking for including Dell Kace and Comodo AV Suite and GP isn't seeing it on most of our clients. When it does see it, it only appears to recognize old versions (v6.4 for Kace & v8 for Comodo). How are these checks governed? Can they be edited?

Second is when I define custom checks it never seems to work, then one of the checks I created worked all of a sudden on one of the HA-Pairs, but not the other (The one that worked is running PanOS 8.2 and the other is running PanOS 7.1.10)

Has anyone else run into issues like this? What are my options?

Re: GlobalProtect HIP not identifying products.

Mick_Ball — Tue, 24 Oct 2017 20:52:38 GMT

Hmmmmm... not had this issue on v7.x but my reg checks are mainly done on reg settings modified by group policy not 3rd party apps.

my first point of call would be to open globalprotect client and select “host state”. This will advise if the client actually recognises the hip offered by your portal config.

this includes custom checks (bottom of output). This may assist in your point of failure.

if the custom check is not displayed as expected then the hip will have no chance of progression.

i suppose thats pretty obvious really, not sure why i added that....

topic Re: GlobalProtect HIP not identifying products. in General Topics

GlobalProtect HIP not identifying products.

Re: GlobalProtect HIP not identifying products.