Security

Reply
Frequent Contributor I
Posts: 97
Registered: ‎01-27-2015

ClearPass and Palo Alto Networks Integration

I set Clearpass and Palo Alto for communication via API

 

( follow this instruction http://www.arubanetworks.com/assets/pso/TechNote_ArubaAndPaloAltoNetworksIntegration.pdf

 

Now, On palo-alto, It can see only ip-address and username of authenticated clients and didn't see device name or device type. But on clearpass, I see all endpoint informations.

 

How i troubleshoot and solve this problem ?  

 

 

Guru Elite
Posts: 8,637
Registered: ‎09-08-2010

Re: ClearPass and Palo Alto Networks Integration

Please be sure to use the TechNotes from the support site.

 

https://support.arubanetworks.com/Documentation/tabid/77/DMXModule/512/Command/Core_Download/Default.aspx?EntryId=14554

 


Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Frequent Contributor I
Posts: 97
Registered: ‎01-27-2015

Re: ClearPass and Palo Alto Networks Integration

Hi Tim,

Thank you for fast reply.
I set up follow step except page 19. I used clearpass 6.5 but when i want to set session check, there isn't ip-address-change-notify to select. Is it caused that palo didn't receive informations ?


Thank,
Community Administrator
Posts: 33
Registered: ‎11-01-2012

Re: ClearPass and Palo Alto Networks Integration

Follow the examples in this guide: ClearPass 6.X and PANW Integration V5. Syntax has changed in more recent versions of ClearPass.

Frequent Contributor I
Posts: 97
Registered: ‎01-27-2015

Re: ClearPass and Palo Alto Networks Integration

Following page 20, There isn't IP-Address-Change-Notification on session-type

 

Capture.PNG

Community Administrator
Posts: 33
Registered: ‎11-01-2012

Re: ClearPass and Palo Alto Networks Integration

What version of ClearPass are you running? The configuration changed in 6.5 and is documented in the technote.

Frequent Contributor I
Posts: 97
Registered: ‎01-27-2015

Re: ClearPass and Palo Alto Networks Integration

Clearpass version is 6.5 . Are there're any update for this version ?


Thanks
Moderator
Posts: 492
Registered: ‎11-09-2012

Re: ClearPass and Palo Alto Networks Integration

Well I write the CPPM/PANW TechNote and in the latest published version, V5 [which was published in May 2015] it details on page 19 the required configuration. Here is a link to my TechNote. HTH.

 

ClearPass 6.X and PANW Integration V5


Best Regards
-d

Snr Tech Marketing Engineer - ClearPass

-- Found something helpful, important, or cool? Click the Kudos Star in a post.
-- Problem Solved? Click "Accept as Solution" in a post.
Search Airheads
Showing results for 
Search instead for 
Did you mean: