topic Re: GP Data file: You do not have a global protect license in General Topics

GP Data file: You do not have a global protect license

Jake_Ryan — Tue, 31 Mar 2020 13:20:30 GMT

Hello

we are trying to implement HIP checks for our users but we seem to be getting many clients not reporting AV installed

we have the same clients in the same locations and other gateways all reporting correctly

we have checked the non-compliant desktops directly and we can see the AV is there but not being detected in the host information

I was wondering is this was something to do with the data file versions between gateways - but what I am finding is even though I have set a schedule the files never seem to download

I run the following: less mp-log avdata.log

and the output which stands out is: <result>You do not have a global protect license</result>

but all my firewalls are licences for portal and gateway and all running panOS 8.1.4

any suggestions?

is there a way I can tell the difference somewhere?

Re: GP Data file: You do not have a global protect license

kiwi — Wed, 01 Apr 2020 13:36:40 GMT

Hi @Jake_Ryan ,

Yes, the datafile difference is likely to be the issue here.

The datafile contains the OPSWAT file that lists the vendors and vendor versions to be used in the HIP object configuration.

A different/older datafile might not contain the vendor info or updated information version.

I'd doublecheck the licenses and get those datafiles updated.

Cheers,

-Kiwi.

Re: GP Data file: You do not have a global protect license

Jake_Ryan — Mon, 06 Apr 2020 15:14:15 GMT

Hello

thank you for the reply, I have not found a resolution for the data file but I did fix my underlying issue with our anti-virus being detected

turns out it was deployed as part of a wrap around package deployment which renamed the was the AV was installed causing GP not to detects the vendor information - so I have this bit resolved which is the main thing for now