Security

I set Clearpass and Palo Alto for communication via API

 

( follow this instruction http://www.arubanetworks.com/assets/pso/TechNote_ArubaAndPaloAltoNetworksIntegration.pdf ) 

 

Now, On palo-alto, It can see only ip-address and username of authenticated clients and didn't see device name or device type. But on clearpass, I see all endpoint informations.

 

How i troubleshoot and solve this problem ?  

 

 

Please be sure to use the TechNotes from the support site.

 

https://support.arubanetworks.com/Documentation/tabid/77/DMXModule/512/Command/Core_Download/Default.aspx?EntryId=14554

 

Hi Tim,

Thank you for fast reply.
I set up follow step except page 19. I used clearpass 6.5 but when i want to set session check, there isn't ip-address-change-notify to select. Is it caused that palo didn't receive informations ?


Thank,

Follow the examples in this guide: ClearPass 6.X and PANW Integration V5. Syntax has changed in more recent versions of ClearPass.

Following page 20, There isn't IP-Address-Change-Notification on session-type

 

What version of ClearPass are you running? The configuration changed in 6.5 and is documented in the technote.

Clearpass version is 6.5 . Are there're any update for this version ?


Thanks

Well I write the CPPM/PANW TechNote and in the latest published version, V5 [which was published in May 2015] it details on page 19 the required configuration. Here is a link to my TechNote. HTH.

 

ClearPass 6.X and PANW Integration V5