Security

 View Only
Expand all | Collapse all

Palo Alto Integration Client Certificate

This thread has been viewed 3 times
  • 1.  Palo Alto Integration Client Certificate

    Posted Apr 26, 2019 05:04 AM

    Hi,

     

    We're not using Clearpass, but we're using the Palo Alto XMLAPI configuration option on our v8.3.0.4 7240 controllers to send user-id info to our firewalls.

     

    However, since Palo V8.x their User-ID Agent requires the controllers to present a client certificate as per

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000boMWCAY

     

    How can I install a client certificate to the controllers and force them to use it for Palo XMLAPI sessions?

    Many thanks



  • 2.  RE: Palo Alto Integration Client Certificate

    Posted Jul 30, 2019 07:33 AM

    For anyone else looking at this, I've asked our supplier to raise a feature request on Aruba to enable the use of a client certificate when using the Palo Alto profiles.

    I've had no updates on that so far.