What Does "wa_3rd_party_host_32.exe" and "wa_3rd_party_host_64.exe" Used For In GlobalProtect App Directory?

What Does "wa_3rd_party_host_32.exe" and "wa_3rd_party_host_64.exe" Used For In GlobalProtect App Directory?

26467
Created On 11/04/21 23:09 PM - Last Modified 12/13/22 23:33 PM


Question


What does "wa_3rd_party_host_32.exe" and "wa_3rd_party_host_64.exe" used for in GlobalProtect app directory?

Environment


  • GlobalProtect app
  • GlobalProtect release 5.1, 5.2
  • Windows OS

Answer


  1. "wa_3rd_party_host_32.exe" and "wa_3rd_party_host_64.exe" are OPSWAT binaries used by Global Protect to perform posture assessment.
  2. Global-protect works with Opswat (the engine that Global-protect uses to collect and patch HIP data) to get information regarding various 3rd party software. Once the client connects to the gateway, the Global-protect client generates a HIP-report from the client.
  3. wa_3rd_ processes in GP is only to collect information, it will not do a patch update. It checks the windows server with current patch so that policy can be enforced.

Additional Information


GlobalProtect Agent (App) Directory Structure on Microsoft Windows
Other users also viewed:
Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000oMk6CAE&lang=en_US%E2%80%A9&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Choose Language