HIP Check licensing expired

[Sec101]

I thought that HIP check licensing expiration (trial version), would cause any rules on the FW - using a HIP check profile column to not match.   Instead, it appears that it causes the firewall to simply not care about that column at all.... and allow traffic through, on the rule with the HIP check profile specified, even if you are out of compliance.  Do others have experience with this?  I guess this makes sense, just expected different behavior.

[jdelio]

Curious if you followed this article.. or something else?

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClVACA0

[MP18]

Thanks for posting good link for HIP profile configuration.

[Sec101]

Nope, just set up some HIP checks checking against internal programs, which definitely worked.  I wonder if there is a grace period after one of these license expire?