This section provides you information on how to apply host compliance profile to a
security policy
| Where Can I Use This? | What Do I Need? |
|
|
- GlobalProtect Subscription License
- GlobalProtect app 6.0. or later versions
- PAN-OS 12.1.2 and later versions
- Cloud Identity Engine
- Device Certificate
|
You can add the HCP to a security policy and create the HCP-enabled security rules on
your gateway(s).
As a best practice, you should create your security policy rules and test that they
match the expected flows (based on the source and destination criteria) before
adding your HCPs. By doing this, you can better determine the proper placement of
the HCP-enabled rules within the security policy.