Question about HIP, plist check wildcard

[Janus_Hermansen]

Hello all,

I was wondering if the value of my made plist can have wildcard.
I have currently made one that checks the plist "com.apple.softwareupdate" to find the OS version, and wanted the key value to be, as an example "13.2*" or even "13*".

I know there is an already made one that checks for OS version by paloalto, however I wanna input this to the Portals configuration, since I dont want people with a version lower than 10.7 as an example, to even get an ip and just be denied access.

If there however is another way to do this I would appreciate that aswell.

I hope this is the right place to ask this, if not could you please tell me where I am kind a new to this.

Thanks for your time and have a good day.

[Janus_Hermansen]

I need to clarify something, currently I am not putting these on the portal, however setting them as HIP objects/profiles to see if the hit matches. If i type out the entire OS version, the HIP object/profile gets a hit, however when I dont, the  HIP object/profile doesn't

The custom check goes through as shown in this picture:

However the HIP object and profile I made does not seem to get my device.

HIP object:

So as far as I can tell, the HIP information is gathered, however the HIP object is not checked as getting a hit. Thus it would not recognize my device as part of the OS version " 13.* " I have also just tried " 13* " and that did not work either.

[Janus_Hermansen]

This is still a problem, and might continue to be since noone is replying. I will be closing this in one weeks time and accepting this as an answer.

If I do ever find what I am looking for I will be posting it.

[bruce.johnson · Accepted solution]

I don't think you can use a wildcard.  See the knowledgebase article below.  "Since we don't do a regular expression match for HIP OS, we cannot use asterisk as HIP OS match."

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000boJ3CAI