Hi Team,
We are investigating PAN-294687 and would like clarification on the following points.
1. In an NGFW Cluster, how are HIP Reports shared between Panorama, the Leader Node, and Non-Leader Nodes?
Specifically, is HIP Report synchronization between the Leader Node and Non-Leader Nodes performed directly, or through Panorama?
2. Public documentation states that HIP Reports are collected by GlobalProtect Gateways, while PAN-294687 states that the Leader Node cannot retrieve HIP Reports from Panorama.
Could you explain the relationship between HIP Reports received by GlobalProtect Gateways and HIP Reports retrieved from Panorama?
3. If a GlobalProtect Gateway is configured only on the Leader Node, could this mitigate or avoid the impact of PAN-294687?
If not, could you explain why?
Any documentation references or implementation details would be appreciated.
Thank you.
