GP Data file: You do not have a global protect license

[Jake_Ryan]

Hello

we are trying to implement HIP checks for our users but we seem to be getting many clients not reporting AV installed

we have the same clients in the same locations and other gateways all reporting correctly

we have checked the non-compliant desktops directly and we can see the AV is there but not being detected in the host information

I was wondering is this was something to do with the data file versions between gateways - but what I am finding is even though I have set a schedule the files never seem to download

I run the following: less mp-log avdata.log

and the output which stands out is: <result>You do not have a global protect license</result>

but all my firewalls are licences for portal and gateway and all running panOS 8.1.4

any suggestions?

is there a way I can tell the difference somewhere?

[kiwi]

Hi @Jake_Ryan ,

Yes, the datafile difference is likely to be the issue here.

The datafile contains the OPSWAT file that lists the vendors and vendor versions to be used in the HIP object configuration.

A different/older datafile might not contain the vendor info or updated information version.

I'd doublecheck the licenses and get those datafiles updated.

Cheers,

-Kiwi.

[Jake_Ryan]

Hello

thank you for the reply, I have not found a resolution for the data file but I did fix my underlying issue with our anti-virus being detected

turns out it was deployed as part of a wrap around package deployment which renamed the was the AV was installed causing GP not to detects the vendor information - so I have this bit resolved which is the main thing for now