What will collect device information when a user has authenticated and connected to a GlobalProtect...

When a user authenticates and connects to aGlobalProtect gateway, the firewall can collect and evaluate device information usingHost Information Profile (HIP). This feature helps enforce security policies based on the device’s posture before granting or restricting network access.

What is HIP?

Host Information Profile (HIP)is a feature in GlobalProtect that gathers security-related information from the endpoint device, such as:

OS version

Patch level

Antivirus status

Disk encryption status

Host-based firewall status

Running applications

How Does HIP Work?

When a user connects to aGlobalProtect gateway, their device submits itsHIP reportto the firewall.

The firewallevaluatesthis information againstconfigured security policies.

If the devicemeets security compliance, access is granted; otherwise,remediation actions(e.g., blocking access) can be applied.

(A) RADIUS Authentication– While RADIUS is used for user authentication, it doesnot collect device security posture.

(B) IP Address– The user's IP address is tracked but does not providedevice security information.

(D) Session ID– A session ID identifies the user session but does not collect host-based security details.

Firewall Deployment– HIP profiles help enforce security policies based on device posture.

Security Policies– Administrators use HIP checks to restrict non-compliant devices.

Threat Prevention & WildFire– HIP ensures that endpoints are properly patched and protected.

Panorama– HIP reports can be monitored centrally via Panorama.

Zero Trust Architectures– HIP enforcesdevice trustin Zero Trust models.

Why is HIP the Correct Answer?Other Answer Choices AnalysisReferences and Justification:Thus,Host Information Profile (HIP) is the correct answer, as it collects device security information when a user connects to a GlobalProtect gateway.