Focus

PAN-OS Web Interface Help

HIP Objects Firewall Tab

Table of Contents

Select the Firewall tab to enable HIP matching based on the firewall software status of the GlobalProtect endpoints.

HIP Object Firewall Settings
Select Firewall to enable matching on the firewall software status of the host: Is Installed—Match on whether firewall software is installed on the host. Is Enabled—Match on whether firewall software is enabled on the host. If the Is Installed selection is cleared, this field is automatically set to none and is disabled for editing. Vendor and Product—Define specific firewall software vendors and/or products to look for on the host to determine a match. Click Add and then choose a Vendor from the drop-down. Optionally, click Add to choose a specific Product. Click OK to save the settings. Exclude Vendor—Select this option to match hosts that do not have software from the specified vendor.

HIP Object Firewall Settings

Select Firewall to enable matching on the firewall software status of the host:

Is Installed—Match on whether firewall software is installed on the host.
Is Enabled—Match on whether firewall software is enabled on the host. If the Is Installed selection is cleared, this field is automatically set to none and is disabled for editing.
Vendor and Product—Define specific firewall software vendors and/or products to look for on the host to determine a match. Click Add and then choose a Vendor from the drop-down. Optionally, click Add to choose a specific Product. Click OK to save the settings.
Exclude Vendor—Select this option to match hosts that do not have software from the specified vendor.