How to configure HIP objects/profiles with the correct security policy?

To configure  HIP objects/profiles with the correct security policy.

• Palo Alto Firewall
• GlobalProtect Gateway
• HIP Object/profile
• Antivirus

The procedure is explained using an example for carbon Black software, one can use this article for other antivirus vendors.

1. Create Object for any OS device with install antivirus software.

• The same HIP object  can also be configured with MACOS devices:

2. Create the hip profile for install the Antivirus (Make sure choose the OR ) 

3. Create the HIP profile for not installing the Antivirus: ( make sure choose the OR with NOT ) 

4. Create 2 security policy for matching/allow ( install ) and not matching/deny ( not install ) the hip profile :

5. Create the hip notification for NOT matching hip profile under Gateway > Agent> hip notification
   
   
6. Commit the changes.