Security

Where did the PA integration go in Clearpass 6.x that was in Amigopod?

When will it be coming to CP 6.x?  if at all.

Will it be similar to what was avaliable with Amigopod?

Integration with Palo Alto should be in 6.1 CPPM.    It should provide the same if not more functionality compared to the Amigopod version.

Look for the slide deck from AirHeads when it becomes available; there was a session on this.

Thanks!  Looking forward to CPPM 6.1!  Which is soon? I hope.

I attended the session at Airheads regarding this, though i forgot to write down the approx dates of release and version numbers. 

They stated April timeframe for 6.1.

I have upgraded to the 6.1 relase.

I have configure a Endpoint Context Server for both our Palo Alto FWs.

Do you have to change the Server base URL or the UserID Post URL?

I have also created a POST_Authentation enforcement profile that sends a Session-Check (Type) IP_Address-Change-Notify (Name) to our configured Context servers.

Any idea if this is the correct way to do this?

Any doco around or some further guides please?

Sorry, I have not successfully moved to CP 6.1 yet due to a bug I helped uncover,  BUG ID# 14677, where there is a error in upgrading from 6.0.2 to 6.1.  The databases from 6.0.2 do not copy over to 6.1 completely, leaving you with a vanilla 6.1 CP config with little to nothing brought over from 6.0.2.

Did you find your answer?  I would also be interested to know the answers to your questions.

Here is the latest integration Doc. 

Attachment(s)

Tech_Note_-_ClearPass_6.1.0_and_PANW_Integration.pdf   2.22 MB 1 version