topic Re: How to integrate with Palo Alto? in Network Access Control

How to integrate with Palo Alto?

haimeng — Tue, 22 Jan 2019 16:56:27 GMT

How can we integrate Palo Alto firewall to share session information regarding AD and ISE authentication sessions with Palo Alto firewall? Can we do this with PxGrid or web socket?

Re: How to integrate with Palo Alto?

Surendra — Tue, 22 Jan 2019 20:01:04 GMT

Palo Alto firewalls do not talk pxGrid. You can probably send syslogs to the firewall configuring them as Remote Logging Targets on the ISE and configure Palo alto to parse them.

See this http://k12itdir.blogspot.com/2016/02/paloalto-user-id-from-cisco-ise-nodes.html . Disclaimer: Not a Cisco document and may or may not help you.

Re: How to integrate with Palo Alto?

Nidhi — Wed, 23 Jan 2019 04:45:00 GMT

As Surendra mentioned, PAN does not have integration over PxGrid.

You can find few documents on VSA and TACACS configuration here - https://community.cisco.com/t5/security-documents/ise-security-ecosystem-integration-guides/ta-p/3621164#toc-hId--1636445697

Re: How to integrate with Palo Alto?

jeppich — Wed, 23 Jan 2019 13:59:29 GMT

Hi,

PAN has an open integration with pxGrid that is not supported.

Thanks,

John

jeppich@cisco.com

Re: How to integrate with Palo Alto?

haimeng — Wed, 23 Jan 2019 14:05:46 GMT

Thanks John,

Can you elaborate on this one? Where can I find more information?

Re: How to integrate with Palo Alto?

Brian Gonsalves — Wed, 23 Jan 2019 18:59:48 GMT

Hi Hailu

Please have your customer contact Palo Alto for any further information.

Thanks

Re: How to integrate with Palo Alto?

craiglebutt — Thu, 27 Jun 2019 08:41:02 GMT

Do you still have an issue with this?

Re: How to integrate with Palo Alto?

jeppich — Thu, 27 Jun 2019 13:24:32 GMT

Hi,

You need to contact Palo Alto directly.