topic Re: Symantec real time scanning not recognized after upgrading to globalprotect 5.0.5 in General Topics

Symantec real time scanning not recognized after upgrading to globalprotect 5.0.5

Mpizarro1 — Wed, 20 Nov 2019 22:04:27 GMT

Anybody else having problems with GP clients not connecting after upgrading globalprotect to 5.0.5? It looks like 'real time scanning' feature of our Symantec endpoint protection is not being recognized and therefore HIP profile not matching.

Re: Symantec real time scanning not recognized after upgrading to globalprotect 5.0.5

aamarin — Tue, 26 Nov 2019 10:17:28 GMT

To troubleshoot the issue, you can check if HIP Match is taking place as expected, by checking the HIP match logs.

You can also check the full HIP Report by running the below command from CLI:

> debug user-id dump hip-report ip <IP-Address> user <Username> computer <Computer>

To know exactly what to type for the needed fields, you can navigate to "Network > GlobalProtect > Gateways", and then click on "Remote Users", identify the user and fill in according to the below mapping:

<IP-Address> --> Private IP

<Username> --> Primary Username

<Computer> --> Computer

I hope this helps!

Re: Symantec real time scanning not recognized after upgrading to globalprotect 5.0.5

Mpizarro1 — Wed, 27 Nov 2019 17:05:08 GMT

Thank you Aamarin. I already checked HIP and debug hip commands. It seems like we are running into a bug. TAC is investigating, but I was curious if anybody else has experienced similar.

Re: Symantec real time scanning not recognized after upgrading to globalprotect 5.0.5

RPendela — Mon, 03 Feb 2020 19:19:06 GMT

I am facing the same issue on GP client 5.0.6, I am running Symantec 14.2 version on my Mac