cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
Announcements
Choose one of the topics below to view our ISE Resources to help you on your journey with ISE

This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.

3183
Views
5
Helpful
7
Replies
Highlighted
Cisco Employee

How to integrate with Palo Alto?

How can we integrate Palo Alto firewall to share session information regarding AD and ISE authentication sessions with Palo Alto firewall? Can we do this with PxGrid or web socket?

 

3 ACCEPTED SOLUTIONS

Accepted Solutions
Highlighted
Cisco Employee

Re: How to integrate with Palo Alto?

As Surendra mentioned, PAN does not have integration over PxGrid. 

You can find few documents on VSA and TACACS configuration here - https://community.cisco.com/t5/security-documents/ise-security-ecosystem-integration-guides/ta-p/3621164#toc-hId--1636445697

View solution in original post

Highlighted
Cisco Employee

Re: How to integrate with Palo Alto?

Hi,

 

PAN has an open integration with pxGrid that is not supported.

 

Thanks,

John

jeppich@cisco.com

View solution in original post

Highlighted
Cisco Employee

Re: How to integrate with Palo Alto?

Thanks John,

Can you elaborate on this one? Where can I find more information?

View solution in original post

7 REPLIES 7
Highlighted
Cisco Employee

Re: How to integrate with Palo Alto?

Palo Alto firewalls do not talk pxGrid. You can probably send syslogs to the firewall configuring them as Remote Logging Targets on the ISE and configure Palo alto to parse them.

See this http://k12itdir.blogspot.com/2016/02/paloalto-user-id-from-cisco-ise-nodes.html . Disclaimer: Not a Cisco document and may or may not help you.
Highlighted
Cisco Employee

Re: How to integrate with Palo Alto?

As Surendra mentioned, PAN does not have integration over PxGrid. 

You can find few documents on VSA and TACACS configuration here - https://community.cisco.com/t5/security-documents/ise-security-ecosystem-integration-guides/ta-p/3621164#toc-hId--1636445697

View solution in original post

Highlighted
Cisco Employee

Re: How to integrate with Palo Alto?

Hi,

 

PAN has an open integration with pxGrid that is not supported.

 

Thanks,

John

jeppich@cisco.com

View solution in original post

Highlighted
Cisco Employee

Re: How to integrate with Palo Alto?

Thanks John,

Can you elaborate on this one? Where can I find more information?

View solution in original post

Highlighted
Cisco Employee

Re: How to integrate with Palo Alto?

Hi Hailu

 

Please have your customer contact Palo Alto for any further information.

 

Thanks

Highlighted
Enthusiast

Re: How to integrate with Palo Alto?

Do you still have an issue with this?

Highlighted
Cisco Employee

Re: How to integrate with Palo Alto?

Hi,

You need to contact Palo Alto directly.