PaloAlto ACS 5.7 Configuration

[victormanuelsolis]

Hello Team,

I need to know if is possible nowadays to use an ACS 5.7 to authenticate with Radius the PaloAlto devices with OS 10.2, I followed a couple of guides with no success, no matches on the services selection rules, neither on the authorization policies, the PA devices can reach the ACS via icmp and port 1812

[ahollifield · Accepted solution]

cs.co/ise-interop

That being said ACS is LONG EOL.  https://www.cisco.com/c/en/us/obsolete/security/cisco-secure-access-control-system-5-7.html

[victormanuelsolis]

I know this device is obsolete, however is the only device I have so far, so, the main objective here is if someone provides me an old guide to configure the acs and PA devices, I tried with a couple of them on the web, but didn't work.

[Aref Alsouqi]

Not sure if you came across this link? if so, what is the exact issue you are experiencing?

RADIUS Authentication with the Palo Alto Networks Firewall usin... - Knowledge Base - Palo Alto Networks

[victormanuelsolis]

thank for your answer @Aref Alsouqi , YEs I tried with this guide but no luck, the problem is the radius authentication doesn't work, I have no hit count incremental on Service selection rules, neither on the authorization policy rules, however the PA device can reach the ACS via icmp and port 1812

[Aref Alsouqi]

You're welcome. Could you please share your configs of both the PA and ACS for review?

[victormanuelsolis]

Thanks again for your answer, at the end of day, I switched from Radius to Tacacs and it's working, so the radius configuration is no longer needed anymore

[Aref Alsouqi]

You're welcome any time.