Security

last person joined: 23 hours ago 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Back to discussions
Expand all | Collapse all

Palo Alto firewall and ClearPass integration

This thread has been viewed 5 times

  • 1.  Palo Alto firewall and ClearPass integration

    Posted Jan 06, 2016 04:45 PM

    Can someone please provide me documents about Palo Alto firewall and ClearPass integration?

    Many thanks!



  • 2.  RE: Palo Alto firewall and ClearPass integration

    EMPLOYEE


  • 3.  RE: Palo Alto firewall and ClearPass integration

    Posted Jan 06, 2016 04:55 PM

    Many thanks! :)



  • 4.  RE: Palo Alto firewall and ClearPass integration

    Posted Jan 06, 2016 05:28 PM

    This and other TechNotes we've produced can be found here.........

     

    https://support.arubanetworks.com/Documentation/tabid/77/DMXModule/512/Default.aspx?EntryId=7961

     

     



  • 5.  RE: Palo Alto firewall and ClearPass integration

    Posted Jan 06, 2016 06:01 PM

    Is it possible for ClearPass to act as an authentication server for the VPN function of the  Palo Alto firewall ? 



  • 6.  RE: Palo Alto firewall and ClearPass integration

    EMPLOYEE
    Posted Jan 06, 2016 06:07 PM
    Yes, you can use RADIUS for GlobalProtect authentication.


  • 7.  RE: Palo Alto firewall and ClearPass integration

    Posted Jan 07, 2016 11:05 AM

    Thank you very much! :)

     

    Do you have more details info about GlobalProtect with ClearPass, for example, documents?

     



  • 8.  RE: Palo Alto firewall and ClearPass integration

    Posted Jan 07, 2016 12:20 PM

    The integration here is specific to our ability to send context we have learned/groomed/discovered as HIP Objects that can be used by NGFW to make enforcement decisions.

     

    There is a section in my TechNote that covers HIP.

     

    Can I suggest you review that content and then let me know if their anything additional you wanted?

     

     



  • 9.  RE: Palo Alto firewall and ClearPass integration

    Posted Jan 07, 2016 12:31 PM

    I have reviewed the Tecknote and did not find the section to set up Palo Alto VPN using ClearPass as an external RADIUS authentication server. Do you have any info for this?

    Mank thanks for your help.



  • 10.  RE: Palo Alto firewall and ClearPass integration

    EMPLOYEE
    Posted Jan 07, 2016 12:39 PM
    The ClearPass side is just like any other RADIUS service.

    You'll want to look for Palo documentation on setting up the Palo Alto side.