Palo Alto firewall and ClearPass integration

[BCroll]

Can someone please provide me documents about Palo Alto firewall and ClearPass integration?

Many thanks!

[cappalli]

https://support.arubanetworks.com/Documentation/tabid/77/DMXModule/512/Command/Core_Download/Default.aspx?EntryId=17560

[BCroll]

Many thanks! :)

[dannyjump]

This and other TechNotes we've produced can be found here.........

https://support.arubanetworks.com/Documentation/tabid/77/DMXModule/512/Default.aspx?EntryId=7961

[BCroll]

Is it possible for ClearPass to act as an authentication server for the VPN function of the  Palo Alto firewall ? 

[cappalli]

Yes, you can use RADIUS for GlobalProtect authentication.

[BCroll]

Thank you very much! :)

Do you have more details info about GlobalProtect with ClearPass, for example, documents?

[dannyjump]

The integration here is specific to our ability to send context we have learned/groomed/discovered as HIP Objects that can be used by NGFW to make enforcement decisions.

There is a section in my TechNote that covers HIP.

Can I suggest you review that content and then let me know if their anything additional you wanted?

[BCroll]

I have reviewed the Tecknote and did not find the section to set up Palo Alto VPN using ClearPass as an external RADIUS authentication server. Do you have any info for this?

Mank thanks for your help.

[cappalli]

The ClearPass side is just like any other RADIUS service.

You'll want to look for Palo documentation on setting up the Palo Alto side.