Is there a way to see all raw data collected by GlobalProtect APP ?

[saswins]

Hi,

I see in the below document, that you need to create HIP Object/Profile to view the raw host data collected by the GlobalProtect APP. My question is there a way to skip this step and see all raw host data collected by GlobalProtect APP without defining the HIP object/profile ?

https://docs.paloaltonetworks.com/globalprotect/9-1/globalprotect-admin/host-information/configure-h... => Step 4

https://docs.paloaltonetworks.com/globalprotect/9-1/globalprotect-admin/host-information/configure-h...

Thanks,

[nikoolayy1]

The HIP gathering info is what you have to see the info on the end hosts , without it if you have EDR maybe Palo Alto TRAPS or if you use Palo Alto CASB you can see shadow IT cloud apps that your users use:

Next-gen CASB - Palo Alto Networks

Next-Generation CASB Redefines SaaS Security - Palo Alto Networks 

Also I think if you have enabled HIP data collection on the portal you should see some HIP info even without the other HIP options:

GlobalProtect Portals Agent Data Collection Tab (paloaltonetworks.com)