Hi all,
On our infrastructure, users (WIFI, Wired, VPN) are authenticated by ISE (version 2.7.0.355).
The various ISE RADIUS logs are sent to the Palo Alto firewalls.
On these firewalls, we have configured Syslog Parsers (with RegEx) to obtain “login IN” events (for authentication rules). That works well.
We want to do the same for the "login OUT" but we can't find the Logout event in the ISE.
Does this event exist on the ISE? if so, in which Logging category is it found?
Best Regards,
