Wireless Access

Reply
Occasional Contributor II
Posts: 12
Registered: ‎11-14-2008

How can I integrate CPPM with Palo Alto firewall version 4.x?

Customer has implemented ClearPass and Palo Alto, but is still running 4.1 of Palo Alto code.  They would like to use the PA user-id agent to communicate with ClearPass.  Apparently this was available with Amigopod, but not clear how to integrate with ClearPass Guest. 

 

Any help would be greatly appreciated. 

 

Guru Elite
Posts: 21,588
Registered: ‎03-29-2007

Re: How can I integrate CPPM with Palo Alto firewall version 4.x?

[ Edited ]

ClearPass 6.X and PANW Integration V4

 

Thank you Danny Jump!

 

All the rest of the technotes can be found here:  http://support.arubanetworks.com/Documentation/tabid/77/DMXModule/512/EntryId/7961/Default.aspx



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Occasional Contributor II
Posts: 12
Registered: ‎11-14-2008

Re: How can I integrate CPPM with Palo Alto firewall version 4.x?

Colin,

 

I have that document, but it is specific to Palo Alto version 5.X or 6.X.  Customer is running v4.1 of Palo Alto and the document states that if you want to integrate CP with PA prior to v5 to contact your Aruba Clearpass specialist.  Prior to CP, Amigopod could make use of the PA user-id agent, but I haven't found anything indicating how this would be configured with CP.

 

Any ideas?

 

Guru Elite
Posts: 21,588
Registered: ‎03-29-2007

Re: How can I integrate CPPM with Palo Alto firewall version 4.x?

jsayer2221,

 

The person who wrote the document said that the PanOS 4.x was not available for testing.  I don't think we have further information on integrating that version of PanOS.



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Occasional Contributor II
Posts: 12
Registered: ‎11-14-2008

Re: How can I integrate CPPM with Palo Alto firewall version 4.x?

ok.  found a video that showed PA user-id working with Amigopod but was a couple of years old with old code versions on all devices.  Also had very little detail as to what was configured on either the Amigopod or Palo Alto side unfortunately. 

 

checking to see when/if customer is planning to move to PA 5.x code.

 

Search Airheads
Showing results for 
Search instead for 
Did you mean: