An administrator wants to perform HIP checks on the endpoints to ensure their security posture. Which license is required on all Palo Alto Networks next-generation firewalls that will be performing th

The correct answer is A. GlobalProtect Gateway. Host Information Profile (HIP) checks are performed at the (A) GlobalProtect Gateway, which inspects endpoint security posture data sent by the GlobalProtect agent. Therefore, a GlobalProtect Gateway license is required on each firewall acting as a gateway that performs HIP-based

Submitted by luis.pe· Apr 18, 2026Deploy and Configure

Question

An administrator wants to perform HIP checks on the endpoints to ensure their security posture. Which license is required on all Palo Alto Networks next-generation firewalls that will be performing the HIP checks?

Options

AGlobalProtect Gateway
BCurrent and Active Support License
CThreat Prevention
DGlobalProtect Portal

How the community answered

(58 responses)

A
93% (54)
B
2% (1)
C
3% (2)
D
2% (1)

Explanation

Host Information Profile (HIP) checks are performed at the (A) GlobalProtect Gateway, which inspects endpoint security posture data sent by the GlobalProtect agent. Therefore, a GlobalProtect Gateway license is required on each firewall acting as a gateway that performs HIP-based policy enforcement. The GlobalProtect Portal license (D) is for the portal function only. Threat Prevention (C) and Support License (B) do not enable HIP check functionality.

Topics

#GlobalProtect#HIP#Licensing#Endpoint Security

Community Discussion

No community discussion yet for this question.

Full PCNSE Practice