Operational Defect Database

BugZero updated this defect 62 days ago.

Palo Alto Networks | PAN-104780

If you configure a HIP object to match only when a connecting endpoint is managed ( Objects GlobalProtect HIP Objects <hip-object> General Managed ), iOS and Android endpoints that are managed by AirWatch are unable to successfully match the HIP object and the HIP report incorrectly indicates that these endpoints are not managed. This issue occurs because GlobalProtect gateways cannot correctly identify the managed status of these endpoints. Additionally, iOS endpoints that are managed by AirWatch are unable to match HIP objects based on the endpoint serial number because GlobalProtect gateways cannot identify the serial numbers of these endpoints; these serial numbers do not appear in the HIP report.

Last update date:

5/23/2024

Affected products:

Pan OS

Affected releases:

10.1.9

10.1.4

10.1.14

9.1.9

9.1.2

Fixed releases:

No fixed releases provided.

Description:

The earliest recollection of this bug is traced back to PAN-OS 10.1.14 - May 23, 2024. If you configure a HIP object to match only when a connecting endpoint is managed ( Objects GlobalProtect HIP Objects General Managed ), iOS and Android endpoints that are managed by AirWatch are unable to successfully match the HIP object and the HIP report incorrectly indicates that these endpoints are not managed. This issue occurs because GlobalProtect gateways cannot correctly identify the managed status of these endpoints. Additionally, iOS endpoints that are managed by AirWatch are unable to match HIP objects based on the endpoint serial number because GlobalProtect gateways cannot identify the serial numbers of these endpoints; these serial numbers do not appear in the HIP report. For more information: https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-release-notes/pan-os-10-1-14-known-and-addressed-issues/pan-os-10-1-14-known-issues https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-release-notes/pan-os-10-1-4-known-and-addressed-issues/pan-os-10-1-4-known-issues https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-release-notes/pan-os-10-1-9-known-and-addressed-issues/pan-os-10-1-9-known-issues https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-release-notes/pan-os-9-1-release-information/known-issues/known-issues-related-to-pan-os-9-1-releases/pan-os-9-1-2-known-issues https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-release-notes/pan-os-9-1-release-information/known-issues/known-issues-related-to-pan-os-9-1-releases/pan-os-9-1-9-known-issues

Additional Resources / Links

Share:

BugZero® Risk Score

What's this?

Coming soon

Status

Known

Learn More

Search:

...