How to integrate with Palo Alto?

[haimeng]

How can we integrate Palo Alto firewall to share session information regarding AD and ISE authentication sessions with Palo Alto firewall? Can we do this with PxGrid or web socket?

[Surendra]

Palo Alto firewalls do not talk pxGrid. You can probably send syslogs to the firewall configuring them as Remote Logging Targets on the ISE and configure Palo alto to parse them.

See this http://k12itdir.blogspot.com/2016/02/paloalto-user-id-from-cisco-ise-nodes.html . Disclaimer: Not a Cisco document and may or may not help you.

[Nidhi · Accepted solution]

As Surendra mentioned, PAN does not have integration over PxGrid. 

You can find few documents on VSA and TACACS configuration here - https://community.cisco.com/t5/security-documents/ise-security-ecosystem-integration-guides/ta-p/3621164#toc-hId--1636445697

[jeppich · Accepted solution]

Hi,

PAN has an open integration with pxGrid that is not supported.

Thanks,

John

jeppich@cisco.com

[haimeng · Accepted solution]

Thanks John,

Can you elaborate on this one? Where can I find more information?

[Brian Gonsalves]

Hi Hailu

Please have your customer contact Palo Alto for any further information.

Thanks

[craiglebutt]

Do you still have an issue with this?

[jeppich]

Hi,

You need to contact Palo Alto directly.