Block Device Access

Identify the host ID for the endpoints you want to block.
The host ID is a unique ID that GlobalProtect assigns to identify the host. The host ID value varies by device type:
Windows—Machine GUID stored in the Windows registry (HKEY_Local_Machine\Software\Microsoft\Cryptography\MachineGuid)
macOS—MAC address of the first built-in physical network interface
Android—Android ID
iOS—UDID
Chrome—GlobalProtect assigned unique alphanumeric string with length of 32 characters
If you do not know the host ID, you can correlate the user-ID to the host ID in the HIP Match logs:
Select

Monitor

Logs

HIP Match

.

Filter the HIP match logs for the source user associated with the device.

Open the HIP match log and identify the host ID under

OS

Host ID

and optionally the hostname under

Host Information

Machine Name

.


Create a device block list.
You cannot use Panorama templates to push a device block list to firewalls.
Select
Network
GlobalProtect
Device Block List
and
Add
a device block list.
Enter a descriptive
Name
for the list.
For a firewall with more than one virtual system (vsys), select the
Location
(vsys or
Shared
) where the profile is available.
Add a device to a block list.

Add
devices. Enter the host ID (
required
) and hostname (
optional
) for a device you need to block.
Add
additional devices, if needed.
Click
OK
to save and activate the block list.
The device list does not require a commit and is immediately active.