MDM managed status in HIP report for Android device shows "no" while it shows "yes" for other Android devices

MDM managed status in HIP report for Android device shows "no" while it shows "yes" for other Android devices

412
Created On 06/15/23 00:18 AM - Last Modified 11/06/25 20:36 PM


Symptom


The hip report from an Android device that is managed by MDM shows "<managed>no</managed>" on the GlobalProtect Gateway, while The hip report from other Android devices shows <managed>yes</managed>.

The Android device with the issue:
> debug user-id dump hip-report computer xxxxx ip y.y.y.y user zzzz
<?xml version="1.0" encoding="UTF-8"?>
<hip-report>
...
        <entry name="mobile-device">
        <udid></udid>
        <managed-by-mdm>no</managed-by-mdm> <<<<<<<<<<<<<<<<< !!!


Other Android devices without the issue:
> debug user-id dump hip-report computer xxxxx ip y.y.y.y user zzzz

<?xml version="1.0" encoding="UTF-8"?>
<hip-report>
...
        <entry name="mobile-device">
        <udid></udid>
        <managed-by-mdm>yes</managed-by-mdm> <<<<<<<<<<<<<<<<< !!!

 


Environment


  • GlobalProtect
  • HIP report


Cause


In PanGPS.log, the Android device did not receive any MDM configuration:
(8251)05/10 11:55:58:246869 - AppRestriction: MDM no device policy profile...

Other Android devices got the MDM config:
(1149)05/23 03:21:06:787050 - mdm managed is true

This is why the Android device with the issue did not report managed = yes.


Resolution


Please verify the MDM config for the Android device and why the Android device with the issue did not find the MDM profile.

Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000bq3vCAA&lang=en_US&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail