GlobalProtect Host Information Profile (HIP)

The GlobalProtect VPN client reports basic inventory data called a Host Information Profile (HIP) to perform posture assessments for elevated network access. The data collected is limited to:

• Device information, including operating system, MAC address, and serial number.
• Device security settings, including disk encryption, firewall, and auto-update preferences.
• Cortex XDR Application installation and version.
• For access to High Risk network resources, device enrollment in SCCM/MECM or Jamf Pro, and Tenable Nessus vulnerability scanning agent installation and status.

Viewing an Endpoint's GlobalProtect HIP Report

1. Click the GlobalProtect globe icon in the macOS menu bar or Windows system tray and select “Settings” from the hamburger menu (☰) at the top right of the status window.
   
   
2. In the GlobalProtect Settings window, click “Host Information Profile” in the sidebar. This displays the last time HIP data was collected and submitted to the VPN server. Expand the individual categories under Advanced Information to drill into the security posture data collected on the endpoint.
   
   

Troubleshooting Host Information Profile Policy Failures

The GlobalProtect agent does not provide real-time feedback to users when a connection to a network resource is denied due to a HIP policy failure. Users can consult the chart below and their endpoint’s Host Information Profile to determine why a HIP policy failed. Instructions to remediate most of these issues can be found on the Personal Device Security service page.

If you can't identify the issue or resolve it yourself, open a support ticket.