Security

last person joined: yesterday 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Back to discussions
Expand all | Collapse all

Palo Alto user-id api integration prerequisites

This thread has been viewed 5 times

  • 1.  Palo Alto user-id api integration prerequisites

    Posted Mar 01, 2018 06:29 AM

    dear all,

     

    Which are environment prerequisites for PAN user-id XMLAPI integration?

     

    Based on some research and lab test following should be mandatory:

     

    - Radius accounting

    - Endpoint profiling

     

    Can you confirm?

    Any other important prerequisites?

     

    thanks,

    Andrea



  • 2.  RE: Palo Alto user-id api integration prerequisites
    Best Answer

    EMPLOYEE
    Posted Mar 01, 2018 07:02 AM
    Correct


  • 3.  RE: Palo Alto user-id api integration prerequisites
    Best Answer

    Posted Mar 02, 2018 03:01 AM

    Hi Tim,

     

    thanks for confirmation.

     

    In brief PAN user-id integration only works for LAN authentication context (Wireless and Wired) where endpoint=mac-address.

     

    It doesn't work for other authetication context (VPN access, device management).

     

    regards,

    Andrea