topic Re: Send ClearPass XML-API IP-User mappings to PRSIMA firewalls in Prisma Access Discussions

Send ClearPass XML-API IP-User mappings to PRSIMA firewalls

MarcelST — Mon, 18 May 2020 10:34:27 GMT

Hi there,

We have Aruba ClearPass configured to send User-IP mappings via XML-API directly to all the Palo Alto MGMT IPs we have on premises.

Now, with PRISMA firewalls being added into our infra I'm wondering how to make Prisma firewalls fitting into the picture: can I directly send events via XML-API from Aruba ClearPass to Prisma MGMT firewall IP address?

Or should I redesign my architecture, like having Prisma firewalls grab this logs from another firewall/panorama instead?

Re: Send ClearPass XML-API IP-User mappings to PRSIMA firewalls

SuperMario — Mon, 18 May 2020 19:31:36 GMT

Hi @MarcelST ,

You can redistribute user-ids learned on your on prem-firewall to Prisma Access.

Please find the instructions in the link below and let us know if you have any further question:

https://docs.paloaltonetworks.com/prisma/prisma-access/prisma-access-panorama-admin/configure-user-based-policies-with-prisma-access/redistribute-userid-information-for-users-and-networks