HIP check is slow

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

HIP check is slow

L1 Bithead

Anybody else experiencing slowness with HIP check?  Our clients establish an initial connection very quickly (about 5 seconds).  But then the process of doing the HIP check actually takes an additional 40-50 seconds.  I can clearly see in the logs that the HIP check takes this long to occur, and so users aren't able to access certain resources until this check completes.  Any best practices for shortening this time?  We are currently doing three main checks:

 

Domain join check

Check for BigFix

Check for Sentinel One

 

My next steps will be to remove these checks one by one and see if it makes any difference.  I'm not sure exactly how HIP check works, if it checks everything regardless, or if it only checks what you tell it to check.  So not sure if removing single items will make any difference.

4 REPLIES 4

Cyber Elite
Cyber Elite

Which GP version are you running?

Also please check below Link for how HIP check works and how to fix issues related to HIP.

 

https://live.paloaltonetworks.com/t5/general-topics/globalprotect-hip-check-issue/m-p/318137#M81717

 

Regards

 

MP

Help the community: Like helpful comments and mark solutions.

Running 5.2.3

@buck1 

 

We do not have HIP check in our environment.

 

You can try below command it will generate lot of  output.

See if that helps you?

debug user-id dump hip-report computer xxxx user admin ip xxxxx

 

 

MP

Help the community: Like helpful comments and mark solutions.

L2 Linker

Hi,

Did you get a fix for this problem? I'm having the same issue with 40-50second delays for HIP. It means DNS resolution fails in that time and certain apps don't work including errors from Outlook.

  • 4272 Views
  • 4 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!