topic Re: HIP Check licensing expired in General Topics

HIP Check licensing expired

Sec101 — Mon, 02 Dec 2019 18:00:33 GMT

I thought that HIP check licensing expiration (trial version), would cause any rules on the FW - using a HIP check profile column to not match. Instead, it appears that it causes the firewall to simply not care about that column at all.... and allow traffic through, on the rule with the HIP check profile specified, even if you are out of compliance. Do others have experience with this? I guess this makes sense, just expected different behavior.

Re: HIP Check licensing expired

jdelio — Tue, 03 Dec 2019 00:06:57 GMT

Curious if you followed this article.. or something else?

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClVACA0

Re: HIP Check licensing expired

MP18 — Tue, 03 Dec 2019 16:26:10 GMT

Thanks for posting good link for HIP profile configuration.

Re: HIP Check licensing expired

Sec101 — Fri, 06 Dec 2019 20:10:07 GMT

Nope, just set up some HIP checks checking against internal programs, which definitely worked. I wonder if there is a grace period after one of these license expire?