HIP check is slow

[buck1]

Anybody else experiencing slowness with HIP check?  Our clients establish an initial connection very quickly (about 5 seconds).  But then the process of doing the HIP check actually takes an additional 40-50 seconds.  I can clearly see in the logs that the HIP check takes this long to occur, and so users aren't able to access certain resources until this check completes.  Any best practices for shortening this time?  We are currently doing three main checks:

Domain join check

Check for BigFix

Check for Sentinel One

My next steps will be to remove these checks one by one and see if it makes any difference.  I'm not sure exactly how HIP check works, if it checks everything regardless, or if it only checks what you tell it to check.  So not sure if removing single items will make any difference.

[MP18]

Which GP version are you running?

Also please check below Link for how HIP check works and how to fix issues related to HIP.

https://live.paloaltonetworks.com/t5/general-topics/globalprotect-hip-check-issue/m-p/318137#M81717

Regards

[buck1]

Running 5.2.3

[MP18]

@buck1 

We do not have HIP check in our environment.

You can try below command it will generate lot of  output.

See if that helps you?

debug user-id dump hip-report computer xxxx user admin ip xxxxx

[MartinE]

Hi,

Did you get a fix for this problem? I'm having the same issue with 40-50second delays for HIP. It means DNS resolution fails in that time and certain apps don't work including errors from Outlook.