Logic Used for Process List Under HIP Objects

Overview

HIP objects provide a way to perform HIP checks based on the processes running on the end host.

Details

Starting with PAN-OS 6.0, the process list for Custom Checks on a HIP object (HIP Object > Custom Checks > Process List) uses the "OR" logic. If any one of the processes configured in the process list is running, the check should pass. Earlier versions, such as PAN-OS 5.0, apply the "AND" logic on the Process List items.

owner: sraghunandan