I would like to know whether Palo Alto support crowd strike antivirus endpoint monitoring ( Antivirus update check ) before connecting any user to VPN

[Amoltelore]

I would like to know whether Palo Alto support crowd strike antivirus endpoint monitoring ( Antivirus update check ) before connecting any user to VPN network or not.

If yes, Please let me know document for deployment steps.

[TomYoung]

Hello @Amoltelore ,

Yes, the NGFW does support CrowdStrike in a HIP Object.  A GlobalProtect license is require for HIP enforcement.  Finally, the NGFW does not disconnect the user, but the security policy is used to allow or block traffic.  See the URLs below.

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000HBMYCA4&lang=en_US%E2%80%A...

https://docs.paloaltonetworks.com/globalprotect/10-0/globalprotect-admin/host-information/configure-...

Thanks,

Tom