Global Protect and ISE integration

Sanja_Rakic — Tue, 11 Jun 2024 08:31:20 GMT

Hello,

I want to make an integration of Palo Alto and Cisco ISE in these terms:
1. Global Protect users can be authenticated using Cisco ISE
2. There are some dynamic ACLs that define access rights for certain group of users, so the customer would like to continue using these ACLs for Global Protect users

So my question is, ca this integration be made for authentication and authorization purposes?

BR,

Sanja

Re: Global Protect and ISE integration

JayGolf — Wed, 12 Jun 2024 05:00:15 GMT

Hi @Sanja_Rakic ,

You can specify ISE as a radius server on the Palo and authenticate that way. Here is an external link to Packet Switch that shares config details. Configuring Palo Alto Administrator Authentication with Cisco ISE (Radius)

topic Re: Global Protect and ISE integration in GlobalProtect Discussions

Global Protect and ISE integration

Re: Global Protect and ISE integration