How to retrieve and use Data Collection for Global Protect?

Reply
Highlighted
L1 Bithead

How to retrieve and use Data Collection for Global Protect?

Q: I'm using a PA-3020; is there any default data collection gathered with the GlobalProtect VPN client/agents, or do you have to provide custom registry keys to scan for Windows?  

And where can you actually find the information being gathered? 

Tags (2)
Highlighted
L3 Networker

Re: How to retrieve and use Data Collection for Global Protect?

Hi JohnQuile,

 

Can you specify the use-case? I'm not sure I follow your question.

 

Regards,

Varun

Highlighted
L1 Bithead

Re: How to retrieve and use Data Collection for Global Protect?

Sorry, well one example would be if I wanted to block a user from VPN. It says to go to Monitor > Logs > HIP Match and get a HostID. 

But this log section is all empty. 

 

When I go to Network > GlobalProtect > Portals, open the portal and look at Agent > config > Data Collection there is a checkbox on "Collect HIP Data" checked. 

 

So I'm not sure where the "Collect HIP Data" stuff is going, or what I can even really do with it beyond blocking a VPN client. Perhaps I want to only allow VPN with up to date AntiVirus. I'm guessing this HIP data comes into play on that as well? But I'm not seeing the connections (in the context of documentation) on how. 

Highlighted
L7 Applicator

Re: How to retrieve and use Data Collection for Global Protect?

you will need to add HIP objects or/and HIP profiles under Objects-GlobalProtect.

 

you will need the additional gateway license to use these in a policy but not sure if you need that just to see them under the Monitor-HIP Match.

Highlighted
L1 Bithead

Re: How to retrieve and use Data Collection for Global Protect?

HI sorry but how do I know if I have gateway license? Don't I have that already if I have a portal and GlobalProtect license?

Highlighted
L3 Networker

Re: How to retrieve and use Data Collection for Global Protect?

Hi John,

 

Can you check if you've already activated your license? Please go through this link: https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/getting-started/activate-licenses-and-subs...

 

Regards,

Varun

Highlighted
L7 Applicator

Re: How to retrieve and use Data Collection for Global Protect?

Hello,

If you have your VPN users in a different zone, you can also use User-ID to block the users you dont want to VPN in. They can connect but cant go anywhere.

 

Just a thought.

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!