Qualys Device Compliance Dashboard - GlobalProtect Host Information Profile (HIP)
The UW-Madison Office of Cybersecurity provides Qualys - Cloud Platform for Vulnerability Management, a vulnerability management tool. Within Qualys VMDR (Vulnerability Management), a Smart Access dashboard uses the Qualys Cloud Agent to identify devices with GlobalProtect installed that fail WiscVPN GlobalProtect Host Information Profile (HIP) Compliance.
Note: The Qualys dashboard and GlobalProtect HIP checks may not match perfectly, but the dashboard is a helpful tool for spotting problematic devices.
Access the Dashboard
- Log into Qualys: Qualys-URLs to Access Qualys via Single Sign-On
- Click the Dashboard icon from the left menu if it does not load automatically.
- Click the Dashboard drop-down menu.
- Search for Smart Access - Device Compliance - HIP and select it from the list.
Using the Dashboard
The dashboard tracks three indicators aligned with device compliance using GlobalProtect HIP checks (WiscVPN GlobalProtect Host Information Profile (HIP) Compliance):
- Unsupported Operating System (OS): Flags devices running an OS no longer supported by the vendor. It uses built-in Qualys filters for Linux and Windows, and a custom search for macOS. (Note: Built-in filters may flag older builds of Windows 10 22H2 as unsupported.)
- Missing OS Updates > 90 Days: Flags devices missing operating system updates older than 90 days.
- Missing Antivirus/EDR: Flags devices without a recognized Antivirus or Endpoint Detection and Response (EDR) product installed. It checks for common software like Cisco Secure Endpoint, Defender, XProtect, AMP, and ClamAV. (Note This check supports fewer products than GlobalProtect HIP, and Qualys VM cannot confirm if real-time protection is active or if definition files are up to date.)
Click the number on any widget to view the list of affected devices. You can also run additional searches or filters from the main vulnerabilities page.
