GlobalProtect - Disk encryption

[sd@censhare.com]

Hi,

I already searched about this topic but I did not find anything useful.

I want to force our clients to have disk encryption enabled when they want to access our Network via GlobalProtect. I am able to check if the Encryption Software is installed (File Vault in this case) but I want to check if the Disk is encrypted too. I know I could do that via "Encrypted Locations" but our clients named their HDDs like they want. I already looked into the HIP-Match log and found about 20 different hard disk names within 10 minutes =/ so my question is if there is a possibility to create a rule which is independent from the name or location of the hard disk. Something like "Encrypted locations: all"

Thanks in advance

Stephan

[sd@censhare.com]

I tested all known possibilities without success.....=/ If nobody could answer this I think it's time to create a Service Request.

Cheers

Stephan

[hshah]

Hello SD,

At max you can specify Encryption software in HIP Object, but I didnt find option to check if it has encrypted the disk or not.

It appears to be a Feature Request. You may want to check with your Sales Engineer.

Regards,

Hardik Shah

[sd@censhare.com]

HI hshah,

thanks for you answer so I am not the only person who is not able to configure it. I just wanted to know if I am stupid or not .

I will contact my Sales Engineer and will update this post when I know something new about it.

Thanks

Stephan

[HULK]

Here is the Feature Request details for your reference: You can consult with your PAN SE for the same.

Request-1: client-side AV, Desktop firewall, laptop URL filter, disk encryption

FR ID: 3069

Request-2: Add HIP reports to "Related logs" in Monitor

FR ID: 2574

Thanks

[hshah]

Hi Sd,

As Hulk Mentioned we have opened Feature Request for the same, now contact your sales engineer, he will put a request on your behalf.

This feature should be available in future release. SE would be the best person to provide time estimation.

Feel free to ask further question.

Regards,

Hardik Shah