HIP profile evaluation failures after removal of custom HIP check object
203
Created On 06/24/25 13:48 PM - Last Modified 11/12/25 22:40 PM
Symptom
Unexpected loss of resource access after a custom HIP object is deleted
Environment
- Global Protect where a "Custom Check" is currently configured under Network-GlobalProtect-Portals-Agent Configuration-HIP Data Collection-Custom Check for any OS.
Cause
The gateway cannot evaluate the client's custom HIP check information against an object so the gateway's entire HIP evaluation task will fail. The HIP evaluation failure can cause endpoints that would otherwise be allowed to access resources to fail their associated HIP profile checks.
Resolution
- Remove the custom check associated with the HIP object from the Global Protect configuration.
- In the firewall or in the Panorama Template, go to Network-GlobalProtect-Portals-Agent-HIP Data Collection-Custom Checks and delete the custom check that was associated with the HIP object.