Security

last person joined: 2 days ago 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Back to discussions
Expand all | Collapse all

Clearpass to Palo Alto XML userid

This thread has been viewed 4 times

  • 1.  Clearpass to Palo Alto XML userid

    Posted Nov 16, 2015 05:11 PM

    Userid notification from clearpass to palo alto firewall works on our secure network.

    But a guest user does not show any userid information in the firewall monitoring. 

     

     

    Is it possible to tweak the XML enforcement in clearpass such that if its a guest user, clearpass will send the email address as the username?

     

    On our guest network, we are using mac auth. 

     



  • 2.  RE: Clearpass to Palo Alto XML userid

    Posted Nov 20, 2015 10:01 PM
    You should be able to push whatever data they login with even as a guest. They have a current issue if you use a space in the login name. "First last" it will inject a "-" between the two. This is due to be fixed in a later version of CP 6.6 I'm told. Have you read the CP/PAN integration doc?