topic Re: Mac OSX HIP check based on processes in General Topics

Mac OSX HIP check based on processes

scott.jones — Mon, 11 Mar 2019 14:14:52 GMT

I've recently turned on HIP profiles for our windows users, checking to see if our patch management and AV is running by looking at processes. I need to do the same thing for some of our Mac users, but I'm striking out. What is the best way to verify something running as a process via globalprotect on a Mac?

Re: Mac OSX HIP check based on processes

kiwi — Mon, 11 Mar 2019 15:11:03 GMT

Hi @scott.jones ,

Is this what you're looking for ?

I believe it explains both for Windows and Mac :

https://docs.paloaltonetworks.com/globalprotect/7-1/globalprotect-admin/use-host-information-in-policy-enforcement/collect-application-and-process-data-from-clients.html#

Hope it helps !

-Kiwi.

Re: Mac OSX HIP check based on processes

scott.jones — Tue, 19 Mar 2019 11:17:17 GMT

That definitely helped. I ended up having to just look for the com.<app> files to see if they were present. Assuming they are, the default is that they run automatically and the users aren't able to disable them themselves, so it got the job done. Appreciate the assist @kiwi