HIP Global Protect

[claudiochaves]

I want to create a security policy containing a HIP profile as follows: if the connecting machine has ALL category 3 updates installed, certain traffic will be released. I'm very confused about creating this in HIP object, as it is about MISSING PATCHES.

[JayGolf]

Hi @claudiochaves ,

What HIP objects have you created so far? Could you describe which OS and what type of updates are you looking to filter on? 

[arusharma]

I think you have start here: https://docs.paloaltonetworks.com/globalprotect/10-1/globalprotect-admin/host-information/configure-...

You can check this under global protect settings >> Host information profile section under patch management and match accordingly.