Hardware reference guide

GlobalProtect Administrator’s Guide 167
GlobalProtect Quick Configs GlobalProtect for Internal HIP Checking and User-Based Access
Step 9 Create the HIP-enabled and/or
user/group-based security rules on your
gateway(s).
Add the following security rules for this example:
1. Select
Policies > Security and click Add.
2. On the
Source tab, set the Source Zone to l3-trust.
3. On the
User tab, add the HIP profile and user/group to match.
• Click
Add in the HIP Profiles section and select the HIP
profile
MissingPatch.
• Click
Add in the Source User section and select the group
(Finance or Engineering depending on which rule you are
creating).
4. Click
OK to save the rule.
5.
Commit the gateway configuration.
Quick Config: GlobalProtect Internal Gateway Configuration (Continued)