HIP Notification + Windows Updates

[treingruber]

I have HIP notifications set up when users do not have Microsoft patches greater than or equal 2 severity. I would like to only notify them if it is a Windows Update, specifically security updates. As of now, they are getting the notification for any patch from Microsoft with the severity greater than or equal to 2. I see in the GlobalProtect Host Information Profile that there is also a category field that specifies "security_update" in the patch management tab. I was wondering if I can configure my HIP check to specify missing patches from Microsoft and also include the category "security_update". In Panorama when configuring the HIP check, there isn't a field for category. Please advise.

[akuzhuppilly]

Hello @treingruber 

The below document explains how to configure HIP checks for missing Microsoft patches.

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClGyCAK

With this, you have the option to create HIP notification to update the user for the missing patches.

[treingruber]

I have it set up similar to that article. I'm mainly looking to see if I can configure the HIP checks to look specifically for windows updates and not ex. Internet Explorer updates as seen in the article.