Global Protect with HIP Configuration in Palo Alto | Concept | LAB | DAY 47 |

[@mukeshkanojiya6698]

great to see you after months, you are awesome trainer, please keep posting valuable contents like this. thanks you

[@jayrisaacs]

Great video, it would be nice if you started out with what can or can not be accomplished with HIP checks. After setting it up this seems like an feature in the working. If a session fails a HIP check you cannot determine the object that it fail on or if the actual HIP check failed. I am much more concerned when a HIP check fails. Additionally, PA should give the option of terminating the VPN session on a HIP fail. In the current implementation you need to restrict the traffic with a security policy.

[@lcampagna1982]

I had to implemet this a few weeks ago, I had to understanding it in the bad way, this is going to be very helpfull..keep going dude! please, you PBF video helped me SOO MUCH keep going

[@othmanothman365]

Thanks best

[@BikashsTech]

Please follow me Subscribe: bit.ly/3eFwHiy KZbin: kzbin.info Twitter: twitter.com/Bikashshaw82 Facebook: facebook.com/people/Bikash-Kumar-Shaw/100003333695682 Instagram: instagram.com/bikashtech/

[@SysTek2000]

Thank you for this, you just saved me a huge amount of hassle. I had a fundamental misunderstanding on HIP checks and how they worked. Is it at all possible to block login entirely like at the gateway level, or is it only possible to block internal traffic once connected? For example, if someone installs GP on their personal device, I would rather that be blocked entirely from connecting rather than connecting and not being able to go anywhere.

[@siddeshparab5658]

Nice video!! Thanks.. What if I create a HIP object and do not create HIP profile --> Will it just collect the data and not do any action? When we create HIP object and tick to collect the data it is automatically enabled? Is there any other way we can disable the HIP object

[@timboyer1978]

This was a very useful video! Thanks so much for posting it. Is there a way to completely deny connection to the VPN based on HIP info? From the user's perspective this looks like they were able to log on to the vpn successfully (despite the text telling them of the issue). Ideally the connection/login attempt would be denied and some feedback would be available to the user explaining what they need to do to fix the problem.

[@hemanthjacky9798]

Sir, Please do a video on LLDP

[@rajangupta3158]

is it possible to create HIP profile by MAC address??

[@ihsanfavy9265]

hello sir, i have lab palo alto, how we know that we have license for configure hip PROFILE ?

[@campsputra1255]

Hi sir how to enable monitor traffic in palo alto eve-ng? it is possible for PA-EVAL.qcow2 for convert to eve-ng?

[@BikashsTech]

Hi Camps, You should have licensed VM.

[@campsputra1255]

​@@BikashsTech yes i have licensed VM when request PA--VM-EVAL, but when install in vmware workstation pro 16 ,PA-VM-EVAL shutdown automatically after boot,, can you create video install PA-VM-EAVL ib vmware workstation sir? please

[@campsputra1255]

​@@BikashsTech how get licensed VM? does possible convert PA-EVAL.qcow2 to eve-ng without delete licensed?

[@ronitdalal6154]

or login krdoo😀

[@Tech_Simple_Channel]

sir can you share your lab ?

[@BikashsTech]

Hello, how do i do it ?