: HIP Objects Custom Checks Tab
Focus
Focus

HIP Objects Custom Checks Tab

Table of Contents

HIP Objects Custom Checks Tab

  • Objects
    GlobalProtect
    HIP Objects
    <hip-object>
    Custom Checks
Select the
Custom Checks
tab to enable HIP matching on any custom checks you have defined on the GlobalProtect portal. For details on adding the custom checks to the HIP collection, see Network > GlobalProtect > Portals.
HIP Object Custom Checks Settings
Description
Custom Checks
Select
Custom Checks
to enable matching on custom checks you defined on the GlobalProtect portal.
Process List
To check the host system for a specific process, click
Add
and then enter the process name. By default, the app checks for running processes; if you want to see if a specific process is not running, clear the
Running
selection. Processes can be operating system level processes or user-space application processes.
Registry Key
To check Windows hosts for a specific registry key, click
Add
and enter the
Registry Key
to match. To match only the hosts that lack the specified registry key or the key’s value, mark the
Key does not exist or match the specified value data
box.
To match on specific values, click
Add
and then enter the
Registry Value
and
Value Data
. To match hosts that explicitly do not have the specified value or value data, select
Negate
.
Click
OK
to save the settings.
Plist
To check Mac hosts for a specific entry in the property list (plist), click
Add
and enter the
Plist
name. To match only the hosts that do not have the specified plist, select
Plist does not exist
.
To match on specific key-value pair within the plist, click
Add
and then enter the
Key
and the corresponding
Value
to match. To match hosts that explicitly do not have the specified key or value, select
Negate
.
Click
OK
to save the settings.

Recommended For You