Palo Alto: HIP Features - VPN, Host-Info and Firewall Security

The GlobalProtect Host Information Profile (HIP) feature can be used to collect information about the security status of the endpoints -- such as whether they have the latest security patches and antivirus definitions installed, whether they have disk encryption enabled, or whether it is running specific software you require within your department, including custom applications. This information can then be used in security policies to decide if the endpoint is allowed to access specific resources or not. The purpose of this article is:

  • How GlobalProtect HIP works with your computer
  • How the Global Protect VPN uses this information
  • How to use the information in your firewall instance