HIP check is slow

Reply
Highlighted
L1 Bithead

HIP check is slow

Anybody else experiencing slowness with HIP check?  Our clients establish an initial connection very quickly (about 5 seconds).  But then the process of doing the HIP check actually takes an additional 40-50 seconds.  I can clearly see in the logs that the HIP check takes this long to occur, and so users aren't able to access certain resources until this check completes.  Any best practices for shortening this time?  We are currently doing three main checks:

 

Domain join check

Check for BigFix

Check for Sentinel One

 

My next steps will be to remove these checks one by one and see if it makes any difference.  I'm not sure exactly how HIP check works, if it checks everything regardless, or if it only checks what you tell it to check.  So not sure if removing single items will make any difference.

Highlighted
Cyber Elite

Which GP version are you running?

Also please check below Link for how HIP check works and how to fix issues related to HIP.

 

https://live.paloaltonetworks.com/t5/general-topics/globalprotect-hip-check-issue/m-p/318137#M81717

 

Regards

 

MP
Highlighted
L1 Bithead

Running 5.2.3

Highlighted
Cyber Elite

@buck1 

 

We do not have HIP check in our environment.

 

You can try below command it will generate lot of  output.

See if that helps you?

debug user-id dump hip-report computer xxxx user admin ip xxxxx

 

 

MP
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!