HIP Objects Firewall Tab

Objects

GlobalProtect

HIP Objects

<hip-object>

Firewall

Select the

Firewall

tab to enable HIP matching based on the firewall software status of the GlobalProtect endpoints.

HIP Object Firewall Settings
Select Firewall to enable matching on the firewall software status of the host: Is Installed —Match on whether firewall software is installed on the host. Is Enabled —Match on whether firewall software is enabled on the host. If the Is Installed selection is cleared, this field is automatically set to none and is disabled for editing. Vendor and Product —Define specific firewall software vendors and/or products to look for on the host to determine a match. Click Add and then choose a Vendor from the drop-down. Optionally, click Add to choose a specific Product . Click OK to save the settings. Exclude Vendor —Select this option to match hosts that do not have software from the specified vendor.

HIP Object Firewall Settings

Select

Firewall

to enable matching on the firewall software status of the host:

Is Installed

—Match on whether firewall software is installed on the host.

Is Enabled

—Match on whether firewall software is enabled on the host. If the

Is Installed

selection is cleared, this field is automatically set to

none

and is disabled for editing.

Vendor and Product

—Define specific firewall software vendors and/or products to look for on the host to determine a match. Click

Add

and then choose a

Vendor

from the drop-down. Optionally, click

Add

to choose a specific

Product

. Click

to save the settings.

Exclude Vendor

—Select this option to match hosts that do not have software from the specified vendor.

Document:PAN-OS Web Interface Help