Would GlobalProtect VPN be disconnected if HIP check failed?
15280
Created On 10/28/20 16:42 PM - Last Modified 11/30/20 22:27 PM
Question
How can GlobalProtect VPN connection be dropped if HIP Check Fails?
Environment
- GlobalProtect Agent any version.
- Any PAN-OS.
Answer
Once the Global Protect user gets connected, then the HIP match policy will be enforced. If it matches, then the user can access the resources. If the HIP policy does not match, then the user cannot get access to resources; but the HIP check will never disconnect a user from the GlobalProtect VPN. This is how Global Protect works with the HIP.
Please refer to the article below on how the HIP mechanism works.
How Does the HIP Mechanism Work in GlobalProtect?