topic Re: PaloAlto ACS 5.7 Configuration in Network Access Control

PaloAlto ACS 5.7 Configuration

iVicMMac — Fri, 29 Nov 2024 19:42:03 GMT

Hello Team,

I need to know if is possible nowadays to use an ACS 5.7 to authenticate with Radius the PaloAlto devices with OS 10.2, I followed a couple of guides with no success, no matches on the services selection rules, neither on the authorization policies, the PA devices can reach the ACS via icmp and port 1812

Re: PaloAlto ACS 5.7 Configuration

ahollifield — Sun, 01 Dec 2024 19:09:31 GMT

cs.co/ise-interop

That being said ACS is LONG EOL. https://www.cisco.com/c/en/us/obsolete/security/cisco-secure-access-control-system-5-7.html

Re: PaloAlto ACS 5.7 Configuration

iVicMMac — Mon, 02 Dec 2024 16:17:46 GMT

I know this device is obsolete, however is the only device I have so far, so, the main objective here is if someone provides me an old guide to configure the acs and PA devices, I tried with a couple of them on the web, but didn't work.

Re: PaloAlto ACS 5.7 Configuration

Aref Alsouqi — Mon, 02 Dec 2024 17:03:27 GMT

Not sure if you came across this link? if so, what is the exact issue you are experiencing?

RADIUS Authentication with the Palo Alto Networks Firewall usin... - Knowledge Base - Palo Alto Networks

Re: PaloAlto ACS 5.7 Configuration

iVicMMac — Mon, 02 Dec 2024 17:53:09 GMT

thank for your answer @Aref Alsouqi , YEs I tried with this guide but no luck, the problem is the radius authentication doesn't work, I have no hit count incremental on Service selection rules, neither on the authorization policy rules, however the PA device can reach the ACS via icmp and port 1812

Re: PaloAlto ACS 5.7 Configuration

Aref Alsouqi — Tue, 03 Dec 2024 09:21:30 GMT

You're welcome. Could you please share your configs of both the PA and ACS for review?

Re: PaloAlto ACS 5.7 Configuration

iVicMMac — Tue, 10 Dec 2024 00:09:19 GMT

Thanks again for your answer, at the end of day, I switched from Radius to Tacacs and it's working, so the radius configuration is no longer needed anymore

Re: PaloAlto ACS 5.7 Configuration

Aref Alsouqi — Tue, 10 Dec 2024 09:32:26 GMT

You're welcome any time.