Configure HIP Data Collection Settings for the Prisma Access Agent (Panorama)

1. Navigate to the Prisma Access Agent setup.

   • Prisma Access (Managed by Panorama)
     From the Cloud Services plugin in Panorama, select PanoramaCloud ServicesPrisma Access AgentLaunch Prisma Access Agent.
   • NGFW (Managed by Panorama)
     Log in to Strata Cloud Manager as the administrator.
2. Select ConfigurationPrisma Access AgentSettings.

3. Select Prisma Access Agent.
4. Select an existing agent configuration or Add Agent Settings to create a new configuration.

5. If you need to create or update an app configuration rule, follow the instructions in Configure Agent Settings for the Prisma Access Agent (Panorama). Otherwise, go to the next step.
6. In the Host Information Profile (HIP) section, configure the HIP data collection settings.

   1. Select Collect HIP Data to enable HIP data collection on the endpoints that logged in to the gateway.
   2. Specify the Max Wait Time (in seconds) that the Prisma Access Agent should search for HIP data before submitting the available data. The range is 10-60 seconds; the default is 20 seconds.
   3. Select the Certificate Profile that the gateway uses to match the machine certificate sent by the Prisma Access Agent.

      For NGFW deployments, this certificate profile is the same one that you configured in the Infrastructure settings.
7. Click Add Custom Checks to specify any custom data you want to collect from the hosts running this configuration.

   1. Define custom checks to determine whether specific applications are installed and verify if particular processes are running on endpoints.

      For example, if you have any required applications that are not included in the Vendor or Product lists for creating HIP objects, you can create a custom check to determine whether that application is installed (it has a corresponding Windows registry or Mac plist key) or is currently running (has a corresponding running process).

      • Mac—Add a check for a particular Plist key or Key value. To restrict the data collection to specific key values, Add the Key values.
        Process List—Add the processes you want to check for on endpoints to see if they are running. For example, to determine whether a software application is running, add the name of the executable file to the process list.
      • Windows—Add a check for a particular Registry Key or Registry Value. To restrict data collection to a specific Registry Value, Add and then define the specific registry values.
        Process List—Add the processes you want to check for on endpoints to see if they are running. For example, to determine whether a software application is running, add the name of the executable file to the process list.
   2. Save the custom check settings when you are done.
8. When you have finished configuring the Prisma Access Agent settings, Create the configuration.