Select Custom Checks to enable matching on custom checks you defined on the GlobalProtect portal.

To check the host system for a specific process, click Add and then enter the process name. By default, the app checks for running processes; if you want to see if a specific process is not running, clear the Running selection. Processes can be operating system level processes or user-space application processes.

To check Windows hosts for a specific registry key, click Add and enter the Registry Key to match. To match only the hosts that lack the specified registry key or the key’s value, mark the Key does not exist or match the specified value data box.

To match on specific values, click Add and then enter the Registry Value and Value Data. To match hosts that explicitly do not have the specified value or value data, select Negate.

Click OK to save the settings.