10-16-2017 09:56 PM
Hi Team,
We are working on an oppurtunity of Cisco ISE at Lupin pharma where the customer is currently using Palo Alto.
The requirement of the customer is to have the guest access management done by the ISE but at the same time integrate with PAN for the controlling internet access of the guest users via PAN. There is a known integration of our ISE with PAN as documented here:
But the use case here is that the guest user should be populated to either of two groups namely high privilege and low privilege which will be mapped in the PAN policy with Strict and light URL Filtering policy.
Is this possible to have ISE synchronize the group with the guest user details automatically with policy to be applied only as group and not user ID.
Warm Regards,
Yogesh Madhekar
Solved! Go to Solution.
10-17-2017 04:08 AM
There is currently no such integration
Please ask PAN to consume our context via pxgrid and start supporting Scalable group tags as well
Checkpoint has integrated already for this use case
10-17-2017 04:08 AM
There is currently no such integration
Please ask PAN to consume our context via pxgrid and start supporting Scalable group tags as well
Checkpoint has integrated already for this use case
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide