About shubhamgupta

Hi Team   We use Panorama to manage various sites, almost 25 sites are there which we manage completely using panorama, I mean we have pushed the interface IP also using Panorama.(So 25 device groups and template stacks for each of them.) I went through few sites and saw some configuration like interface IP address locally overridden.   Is there any way I can force template specific config like DNS OR NTP IP only and not whole template stack value ? Because if I force template the whole stack, I may end up in mess for the IP address that is locally modified. Also going through 25 sites config is a big pain.   Have you guys faced such issues? any idea or alternative?       ... View more

Hi team   Hope so you  all are doing great. We are in the phase of implementing compliance checks based on HIP checks. Before that we have created multiple HIP objects/profiles to observe our end users asset compliance and now we have asked our IT team to start installing compliance software in the end machine to avoid any issues when we fully provide access based on HIP checks. We generate report of non-compliance machine (matching our non-compliance HIP profile) every week but I am observing something weird now, user who were matching non-compliance HIP checks earlier around 15days back  are not matching those HIP checks now. There is no config change or GP client change on the end machine. As the logs are purging in almost one week but for one user I saw in the HIP report every HIP check was there still it matched wrong HIP object and now it is matching everything perfectly.We can see similar issue for various other users also.   My HIP checks are as follows- Firstly the machine should be part of domain and secondly crowstrike should be installed.(Any version is fine). Any machine not matching either of this criteria are posed as non-compliance.   We are nearing the final stage of this project, it will be great if you guys have any inputs or faced such issue ... View more