10-16-2020 06:41 AM
Anybody else experiencing slowness with HIP check? Our clients establish an initial connection very quickly (about 5 seconds). But then the process of doing the HIP check actually takes an additional 40-50 seconds. I can clearly see in the logs that the HIP check takes this long to occur, and so users aren't able to access certain resources until this check completes. Any best practices for shortening this time? We are currently doing three main checks:
Domain join check
Check for BigFix
Check for Sentinel One
My next steps will be to remove these checks one by one and see if it makes any difference. I'm not sure exactly how HIP check works, if it checks everything regardless, or if it only checks what you tell it to check. So not sure if removing single items will make any difference.
10-16-2020 10:52 AM
Which GP version are you running?
Also please check below Link for how HIP check works and how to fix issues related to HIP.
https://live.paloaltonetworks.com/t5/general-topics/globalprotect-hip-check-issue/m-p/318137#M81717
Regards
10-16-2020 01:41 PM
We do not have HIP check in our environment.
You can try below command it will generate lot of output.
See if that helps you?
debug user-id dump hip-report computer xxxx user admin ip xxxxx
03-05-2021 02:26 AM
Hi,
Did you get a fix for this problem? I'm having the same issue with 40-50second delays for HIP. It means DNS resolution fails in that time and certain apps don't work including errors from Outlook.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
